Description

A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

Remediation

References

CVE-2026-33007

Related Vulnerabilities

SharePoint URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-1323)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-1709)

WordPress Plugin Simple Contact Info Arbitrary File Deletion (1.1.9)

Internet Information Services Other Vulnerability (CVE-1999-0191)

WordPress Plugin Catch Themes Demo Import Unspecified Vulnerability (1.8)

Severity

Medium

Classification

CVE-2026-33007 CWE-476 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Tags

Missing Update Known Vulnerabilities