Search: CVE-2026-24072

CVE-2026-24072 is a high-severity vulnerability in Apache HTTP Server versions 2.4.66 and earlier. It involves improper privilege management (CWE-269) that allows local . htaccess authors to read files with the privileges of the httpd user, effectively escalating their access rights. The issue is resolved in Apache HTTP Server version 2.4.67. Users are advised to upgrade to this fixed version to mitigate the risk.