← Database

CVE-2026-33006

MEDIUM CVSS: 4.8 Published: 2026-05-04 Modified: 2026-06-17

Description

A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

Affected Platforms

Apache Http Server

Weakness Type

CWE-208

References