Critical severity9.1NVD Advisory· Published Sep 22, 2026· Updated Sep 23, 2026

CVE-2026-89282

Description

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authenticated Users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apache Lounge/Apache HTTP Serverllm-fuzzy

Patches

Vulnerability mechanics

References

atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testingnvd
httpd.apache.org/download.cginvd
www.apachelounge.com/viewtopic.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000