PT-2026-36797

🗓️ 10 Dec 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 20 Views

Escalation of privilege in Apache HTTP Server 2.4.66 and earlier lets local .htaccess authors read files as the httpd user; upgrade to 2.4.67.

Reporter	Title	Published	Views	Family All 571
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase	25 Aug 202609:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities due to the included Apache HTTP Server	16 Jun 202614:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2026-24072, CVE-2026-28780, CVE-2026-34059, CVE-2026-33523, CVE-2026-41080, CVE-2026-33857, CVE-2026-34032]	22 May 202605:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities	11 May 202622:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server	18 May 202615:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within IBM HTTP Server, affect IBM Tivoli Monitoring.	8 Jun 202616:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM HTTP Server used by IBM Rational ClearQuest	23 Jul 202619:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within IBM HTTP Server, affect IBM Tivoli Monitoring.	21 Jul 202617:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server	23 Jun 202616:13	–	ibm
FreeBSD	www/apache24 -- Multiple vulnerabilities	4 May 202600:00	–	freebsd

Source	Link
openwall	www.openwall.com/lists/oss-security/2026/05/04/18
bugzilla	www.bugzilla.suse.com/1207327
suse	www.suse.com/security/cve/CVE-2023-25690
bugzilla	www.bugzilla.suse.com/1267962
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
t	www.t.me/ZerodayAlert/686
twitter	www.twitter.com/CCBalert/status/2052065714626843129
osv	www.osv.dev/vulnerability/OESA-2026-2320
ubuntu	www.ubuntu.com/security/CVE-2026-29168
ubuntu	www.ubuntu.com/security/notices/USN-8239-1

27 Aug 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 29

CVSS 3.19.8

EPSS0.49727

SSVC