A vulnerability was found in Apache HTTP Server up to 2.4.65. It has been declared as critical. This affects an unknown part of the component mod_cgid. Executing manipulation can lead to command injection.

This vulnerability is registered as CVE-2025-58098. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.