Security Advisory

CVE-2026-33523

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-04 14:40:41
Last updated 2026-05-04 17:32:49
Assigner apache
CVSS score 6.5
State PUBLISHED

Description

HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers. This issue affects Apache HTTP Server: from through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.