CVE-2026-44119 — Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules

CVE-2026-44119

Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules PUBLISHED

Description (CNA)

Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTTP Server: from through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache HTTP Server	affected 2.4.0 through 2.4.67

CWE

CWE-269

References

https://httpd.apache.org/security/vulnerabilities_24.html

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/06/08/11

CISA-ADP

No English description supplied.

No references supplied.