Skip to main content
CVE-2025-58098VulnerabilityPublished Updated

SUSE · security update for httpd

Affects SUSESource GCVE Database

0
Authoritative record:CVE-2025-58098· High 8.3

Not known to be exploited · CVSS 8.3 High : upgrade to 2.4.66 soon.

Data as of 26 Oct 2026, 06:26 UTC

CVSS base score
8.3High
How severe the flaw is on the 0–10 CVSS scale.
EPSS
1.4% chance of exploitation in 30 days – higher than 72% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 2.4.66

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 5 Dec 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-26.

What to do

Upgrade apache/httpd to 2.4.66.

Affected software

ProductAffectedFixed in
Apacheapache/httpdpkg:rpm/apache/httpdOther threatsAffected
  • <2.4.66
Fixed in
  • 2.4.66

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Red Hat advises monitoring their advisory for updates. Customers are recommended to evaluate the risk and consider disabling Server Side Includes or mod_cgid if feasible as a temporary mitigation. Red Hat also suggests consulting with Technical Account Managers for tailored guidance. Applying mitigations that do not meet Red Hat's standards may be possible but are not officially endorsed.

Description

Red Hat Hardened Images RPM Release

References

Community reviews

Loading reviews…