The Apache Software Foundation has released security update for Apache HTTP Server to address security vulnerabilities (CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-66200). A remote attacker could exploit these vulnerabilities to trigger denial of service condition, security restriction bypass and sensitive information disclosure on the targeted system. The issues affect Apache HTTP Server 2.4.65 and prior versions. The vulnerabilities have been fixed in Apache HTTP Server 2.4.66.

More information on vulnerabilities and update is available in the Apache’s release note – apache.org.