What is GHSA-rxhx-8qf3-fc8h?

GHSA-rxhx-8qf3-fc8h is a security advisory published by GitHub Security Advisories with Low severity. Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some...

Which CVE IDs does GHSA-rxhx-8qf3-fc8h cover?

GHSA-rxhx-8qf3-fc8h covers the following CVE IDs: CVE-2026-42356. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rxhx-8qf3-fc8h?

GHSA-rxhx-8qf3-fc8h has a CVSS v3 base score of 3.7, published by GitHub Security Advisories.

GHSA-rxhx-8qf3-fc8hLowCVSS 3.7

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some...

Vendor

GitHub Security Advisories

Published

October 1, 2026

Last Modified

October 1, 2026

🔗 CVE IDs covered (1)

CVE-2026-42356 →

📋 Description

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a directory enabled for CGI and have no other extension understood by mod_mime.

This issue affects Apache HTTP Server: from 2.4.60 through 2.4.68.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-42356
https://httpd.apache.org/security/vulnerabilities_24.html
http://www.openwall.com/lists/oss-security/2026/10/01/11
https://github.com/advisories/GHSA-rxhx-8qf3-fc8h