The repair has been released for Tumbleweed with snapshot 20260516 …
Currently here with Apache version 2.4.67-1.1 and the repair for CVE-2026-24072 is included.
The SUSE CVE-2026-24072 URL now mentions the Tumbleweed change – presumably the rest of the affected systems will mentioned soon – <CVE-2026-24072>