Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-89282

CVE-2026-89282

Description

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authenticated Users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache HTTP Server Project Apache Lounge Windows

  • 0 to < Apache 2.4.68-260920 Win64affected

References