CVE-2025-59775 - Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF

CVE-2025-59775 - Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF

CVE ID : CVE-2025-59775 Published : Dec. 5, 2025, 11:15 a.m. | 1 hour, 46 minutes ago Description : Server-Side Request Forgery (SSRF) vulnerability  in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off  allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Published
Dec. 5, 2025
Affected Product: Apache
Impact: SSRF

Source: Telegram CVE Monitor