Logo
›
›vulnerability›CVE-2026-42356
Name
CVE-2026-42356
Source
NVD ( link)Debian ( link)
Description
Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a directory enabled for CGI and have no other extension understood by mod_mime. This issue affects Apache HTTP Server: from 2.4.60 through 2.4.68.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
apache2
Exploitable

Vulnerability Ratings#


3.7
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
2.4.68
Exploitable
buildroot
master
2.4.69
Not Affected
openwrt
master
2.4.65-r1
Exploitable
openwrt
openwrt-25.12
2.4.65-r1
Exploitable
yocto
kirkstone
2.4.66
Exploitable
yocto
master
2.4.68
Exploitable