Vulnerability Bulletins

CVE-2026-33523

   
Affected software APACHE
 
HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers.

This issue affects Apache HTTP Server: from through 2.4.66.

Users are recommended to upgrade to version 2.4.67, which fixes the issue.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-33523