CVE-2026-73637

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.69

Description A use after free issue exists in the mod auth digest module. This occurs when an unauthenticated remote client sends concurrent Digest authentication requests while AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0, leading to authentication state corruption. Use after free is a condition where a program continues to use a pointer after it has been freed, which can lead to crashes or unpredictable behavior.

Recommendations Upgrade to version 2.4.69.