Approved changes feed: RSS · Atom

cpe:2.3:a:apache_http_server_project:apache_lounge_windows:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache Http Server Project (300adf30-12ce-513a-bc68-32c9b8b2d2fa)
ProductApache Lounge Windows (b7c7ad52-b845-57dd-bd23-ae67719f76b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-89282 vulnerable 2026-10-13 12:29:55.084430 CVE-2026-89282
The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authenticated Users.
Published: 2026-09-22T19:17:15.992Z
Updated: 2026-09-23T12:26:54.814Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-89281 vulnerable 2026-10-13 12:29:54.928783 CVE-2026-89281
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.
Published: 2026-09-22T19:17:19.393Z
Updated: 2026-09-23T12:32:44.828Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.