July 29, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-33006NVD

Vulnerability Summary

A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker.

Users are recommended to upgrade to version 2.4.67, which fixes this issue.
Severity Level
UNKNOWN
Published Date
May 4, 2026
Last Modified
May 4, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.19%Probability
Root Weakness (CWE)
N/A

External References