{"uuid": "b307f845-1667-4ac4-8cd5-903613caa2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59775", "type": "seen", "source": "https://t.me/pphm_HackerNews/1172", "content": "Web-Server Update Closes Dangerous SSRF and Privilege Bypass Loopholes\n\nVersion 2.4.66 of Apache HTTP Server fixes a serious SSRF vulnerability, tracked as CVE-2025-59775, that affects Windows deployments. When certain settings \u2014 AllowEncodedSlashes On and MergeSlashes Off \u2014 are enabled, the flaw can be exploited to force the server to make malicious internal or external requests, potentially leaking NTLM credential hashes to an attacker-controlled server.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:03.793802Z"}