Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
6247 articles · 249379 vulns · 37/41 feeds (7d)
← Back to list
9.8
CVE-2026-59797PATCHED
apache · http_server

Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function

Description

Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Affected Products

VendorProductVersions
apachehttp_server2.4.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
apachehttpcert_advisory90%
red hatred hat enterprise linuxcert_advisory90%

References

  • https://httpd.apache.org/security/vulnerabilities_24.html(vendor-advisory)

Related News (5 articles)

Tier B
CERT-FR14d ago
Multiples vulnérabilités dans le noyau Linux d'Ubuntu (09 octobre 2026)
→ No new info (linked only)
Tier B
BSI Advisories21d ago
[NEU] [hoch] Apache HTTP Server: Mehrere Schwachstellen
→ No new info (linked only)
Tier B
CERT-FR21d ago
Multiples vulnérabilités dans Apache HTTP Server (02 octobre 2026)
→ No new info (linked only)
Tier C
oss-security21d ago
CVE-2026-59797: Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function
→ No new info (linked only)
Tier C
VulDB21d ago
CVE-2026-59797 | Apache HTTP Server up to 2.4.68 mod_ssl privileges management
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.8 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://httpd.apache.org/security/vulnerabilities_24.html
CWECWE-269
PublishedOct 1, 2026
Trending Score13
Source articles5
Independent4
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-65905
Apache Tomcat: Limited replay attack possible with DIGEST authentication
Trending: 68
CRITICALCVE-2026-68525
Apache Tomcat: Redirect after FORM auth may bypass method specific constraints
Trending: 51
CRITICALCVE-2026-65182
Apache Tomcat: Bypass longest prefix security constraint
Trending: 50
CRITICALCVE-2026-65637
Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete
Trending: 50
CRITICALCVE-2026-84939
Apache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path traversal attacks
Trending: 49

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 1, 2026
Discovered by ZDM
Oct 1, 2026
Patch Available
Oct 1, 2026