← CVE Intelligence

CVE-2026-33523

Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line PUBLISHED

Description (CNA)

HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers. This issue affects Apache HTTP Server: from through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache HTTP Serveraffected 2.4.0 through 2.4.66

CWE

CWE-443

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.