CVE-2016-1776: Apple Mac OS X Server

Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which allows remote attackers to obtain sensitive configuration information via an HTTP request.

Affected products

• Apple Mac OS X Server: up to and including 5.0.15

Published 2016-03-24. Last modified 2026-06-17.