CVE-2026-33006 | Apache HTTP Server up to 2.4.66 mod_auth_digest timing discrepancy

May 4, 2026 Yanac

A vulnerability was found in Apache HTTP Server up to 2.4.66 and classified as problematic. Affected by this issue is some unknown functionality of the component mod_auth_digest. The manipulation results in observable timing discrepancy.

This vulnerability is identified as CVE-2026-33006. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More