CVE-2026-89281

UNKNOWN 0.0

CVE-2026-89281

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.

Vendor	apache http server project
Product	apache lounge windows
Published	Sep 22, 2026

Stay Ahead of the Next One

Get instant alerts for apache http server project apache lounge windows

Be the first to know when new unknown vulnerabilities affecting apache http server project apache lounge windows are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Apache HTTP Server Project / Apache Lounge Windows

0 < Apache 2.4.68-260920 Win64

References

NVD ↗ CVE.org ↗ EPSS Data ↗

httpd.apache.org: https://httpd.apache.org/download.cgi atos.net: https://atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testing apachelounge.com: https://www.apachelounge.com/viewtopic.php?t=9515