Security Advisory

CVE-2026-33007

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-04 14:41:27

Last updated 2026-05-05 15:07:42

Assigner apache

CVSS score not scored

State PUBLISHED

Description

A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

← Browse all CVEs View on cve.org ↗