VulnSocial

CVE-2026-44119Disclosure(apache / http_server)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch apache http_server systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTTP Server: from through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

apache CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-269

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • http_server

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 2d ago at 1 mentions (2026-06-09); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
apache
Products
http_server

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-09: 1Mentions · 2026-06-11: 1Mentions · 2026-06-16: 1Patch / Workaround · 2026-06-09: 1Patch / Workaround · 2026-06-16: 1Technical Details · 2026-06-09: 1Technical Details · 2026-06-16: 106-0906-1106-16
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-091
Disclosure1
2026-06-111
Disclosure1
2026-06-161
Patch1
Full discourse3 posts
  • Lucian Nitescu 🇷🇴@LucianNitescu
    Disclosure

    Just earned my second #CVE in #Apache Httpd: CVE-2026-44119. It feels like everyone who looked at this one found the same bypass, which is exactly why a second set of eyes matters on every patch. Glad to have helped prevent its exploitation. Kudos to everyone who reported it! 👏 https://t.co/9zET3QAECr

    Post summary

    The user announces the discovery of CVE-2026-44119 in Apache Httpd, noting a community‑discovered bypass that presumably prevented exploitation.

    11031281
    954 followersView on X
  • Kazuki Omo@omokazuki
    Disclosure

    SIOSセキュリティブログを更新しました。 Apacheの脆弱性(Moderate: CVE-2026-34355, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186, CVE-2026-49975, Low:複数)と2.4.68リリース #sios_tech #security #vulnerability #セキュリティ #脆弱性 #apache https://security.sios.jp/vulnerability/apache-security-vulnerability-20260609/

    Post summary

    SIOS published a security blog update that lists several Apache CVEs, their severity levels, and announces the release of version 2.4.68, which includes the necessary patches.

    00021186
    372 followersView on X
  • iototsecnews@iototsecnews
    Patch

    Apache HTTP Server の複数の脆弱性が FIX：コード実行や権限昇格の恐れ https://iototsecnews.jp/2026/06/09/apache-http-server-2-4-68-patches-multiple-security-vulnerabilities/ Apache HTTP Server における複数の脆弱性の原因は、各モジュールにおけるメモリ処理や入力検証の不備にあります。たとえば、CVE-2026-34355／CVE-2026-34356 では信頼できない応答を処理する際のバッファオーバーフロー、CVE-2026-49975 では HTTP/2 リクエスト時の過剰なメモリ割り当ての制御不備、CVE-2026-44119 では式処理の不備が原因となっています。これらのプログラム内の確認や制限の不具合により、サーバの不安定化や制限されたリソースへのアクセスといった危険性が生じています。ご利用のチームは、ご注意ください。 #Apache #CVE202629167 #CVE202629170 #CVE202634355 #CVE202634356 #CVE202642536 #CVE202648913 #CVE202649975 #HTTPServer #Vulnerability

    Post summary

    The article announces that Apache HTTP Server 2.4.68 has fixed several CVEs, detailing the technical causes and referencing affected modules, but it does not provide exploit details or evidence of current exploitation.

    01100641
    499 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appapachehttp_server---

Explore more

Back to dashboardapache CVEshttp_server vulnerabilities