AZL-85998

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-85998.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-85998

Upstream

CVE-2026-24072

Published

2026-05-04T13:16:00Z

Modified

2026-08-28T17:47:37.438647082Z

Summary

CVE-2026-24072 affecting package httpd for versions less than 2.4.67-1

Details

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.

Users are recommended to upgrade to version 2.4.67, which fixes this issue.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24072

Affected packages

Azure Linux:3 / httpd

Package

Name: httpd
Purl: pkg:rpm/azure-linux/httpd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.67-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-85998.json"