Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions.
This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade apache2 | Oct 5, 2026 | Oct 1, 2026 |
| Amazon Linux Ami 2 | — | Upgrade mod_ldapUpgrade httpd-filesystemUpgrade mod_proxy_htmlUpgrade mod_sessionUpgrade mod_mdUpgrade mod_http2Upgrade httpd-debuginfoUpgrade httpd-manualUpgrade httpd-develUpgrade mod_sslUpgrade httpd-toolsUpgrade httpd | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade httpd-filesystemUpgrade mod_sslUpgrade httpdUpgrade mod_proxy_html-debuginfoUpgrade mod_http2-debuginfoUpgrade httpd-develUpgrade mod_sessionUpgrade httpd-tools-debuginfoUpgrade httpd-debuginfoUpgrade mod_lua-debuginfoUpgrade mod_luaUpgrade mod_session-debuginfoUpgrade mod_ldapUpgrade mod_ssl-debuginfoUpgrade mod_proxy_htmlUpgrade httpd-debugsourceUpgrade httpd-manualUpgrade mod_ldap-debuginfoUpgrade httpd-coreUpgrade httpd-toolsUpgrade httpd-core-debuginfoUpgrade mod_http2 | Oct 13, 2026 | Oct 1, 2026 |
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Oct 2, 2026 | Oct 1, 2026 |
| Debian | — | Upgrade apache2 | Oct 20, 2026 | Oct 1, 2026 |
| Freebsd | — | Upgrade apache24 | Oct 5, 2026 | Oct 1, 2026 |
| Redhat_linux | — | No solution exists | Oct 14, 2026 | Oct 1, 2026 |
| Ubuntu | — | Upgrade apache2-mpm-prefork (Ubuntu Pro)Upgrade apache2Upgrade apache2-devUpgrade libapache2-mod-md (Ubuntu Pro)Upgrade apache2.2-bin (Ubuntu Pro)Upgrade apache2-bin (Ubuntu Pro)Upgrade apache2 (Ubuntu Pro)Upgrade apache2-suexec-pristine (Ubuntu Pro)Upgrade libapache2-mod-proxy-html (Ubuntu Pro)Upgrade apache2-mpm-event (Ubuntu Pro)Upgrade libapache2-mod-macro (Ubuntu Pro)Upgrade apache2-ssl-devUpgrade apache2-dev (Ubuntu Pro)Upgrade libapache2-mod-proxy-uwsgi (Ubuntu Pro)Upgrade apache2-suexec-pristineUpgrade apache2-utilsUpgrade apache2-binUpgrade apache2-mpm-itk (Ubuntu Pro)Upgrade apache2-ssl-dev (Ubuntu Pro)Upgrade apache2-utils (Ubuntu Pro)Upgrade apache2-suexec (Ubuntu Pro)Upgrade apache2-suexec-customUpgrade apache2-suexec-custom (Ubuntu Pro)Upgrade libapache2-mod-proxy-uwsgiUpgrade libapache2-mod-mdUpgrade apache2-mpm-worker (Ubuntu Pro) | Oct 12, 2026 | Oct 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 22, 2026 | Oct 1, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub