apache_lounge_windows vulnerabilities
CVEs whose affected-version data names the apache_lounge_windows package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-89282Critical· 9.1PoCThe Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authenticated Users.
The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:\, which inherits write access for Authenticated Users.
▾ AbyssalApache HTTP Server Project · Apache Lounge WindowsEPSS 0.48%via NVD
CVE-2026-89281High· 8.4The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.
▾ TwilightApache HTTP Server Project · Apache Lounge WindowsEPSS 0.18%via NVD