PT-2026-36815

CVE-2026-33523

Published

2026-03-05

Updated

2026-08-27

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.67

Description HTTP response splitting occurs in multiple Apache HTTP Server modules when interacting with untrusted or compromised backend servers. This issue allows an attacker to split an HTTP response, potentially leading to cache poisoning or cross-site scripting.

Recommendations Upgrade to version 2.4.67.

Exploitability

Exploit

Fix

Impacts

Researchers

Dawit Jeong

Haruki Oyama

Merih Mengisteab

Vendors

Affected products

Weakness enumeration