PT-2026-36814

CVE-2026-33007

·

Published

2026-03-04

·

Updated

2026-08-27

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.67
Description A NULL pointer dereference in the mod authn socache module allows an unauthenticated remote user to crash a child process when a caching forward proxy configuration is used. A NULL pointer dereference occurs when a program attempts to read or write to a memory address that is NULL, typically leading to a program crash.
Recommendations Upgrade to version 2.4.67.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALSA-2026:21391
ALSA-2026:21433
ALSA-2026:22140
AZL-86016
BIT-APACHE-2026-33007
OESA-2026-2320
OESA-2026-2398
OESA-2026-2400
OESA-2026-2401
OESA-2026-2402
OPENSUSE-SU-2026:10785-1
OPENSUSE-SU-2026:21115-1
RHSA-2026:13938
RHSA-2026:27200
RHSA-2026:47046
SUSE-SU-2026:2103-1
SUSE-SU-2026:2104-1
SUSE-SU-2026:22199-1
SUSE-SU-2026:22209-1
SUSE-SU-2026:2641-1
SUSE-SU-2026:2686-1
USN-8239-1
USN-8571-1
Found an issue in the description? Have something to add? Feel free to write us 👾