Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed.
Last checked: 2026-10-02 22:03 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-01 16:19 UTC)
Fix evidence last checked: 2026-10-02 10:35 UTC