DEBIAN-CVE-2026-59797

Back to feed

Critical

Published Oct 1, 2026

CVSS

9.8

CRITICAL

EPSS

Exploit Prediction Scoring System — the modeled probability of in-the-wild exploitation in the next 30 days.

—

Affected packages

Summary

Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Developer impact

Recommended action

Affected packages

Sources