High severity8.4NVD Advisory· Published Sep 22, 2026· Updated Sep 23, 2026

CVE-2026-89281

Description

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apache Lounge/Apache HTTP Serverllm-fuzzy

Patches

Vulnerability mechanics

References

atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testingnvd
httpd.apache.org/download.cginvd
www.apachelounge.com/viewtopic.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000