Threats Tagged 'cve-2026-33007'
View all threats tagged with 'cve-2026-33007'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-33007'
Click on any threat for detailed analysis and mitigation recommendations
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateCVE-2026-23918 0 This update includes the following RPMs: httpd: * httpd-2.4.67-0.1.hum1 (aarch64, x86_64) * httpd-core-2.4.67-0.1.hum1 (aarch64, x86_64) * httpd-devel-2.4.67-0.1.hum1 (aarch64, x86_64) * httpd-filesystem-2.4.67-0.1.hum1 (noarch) * httpd-manual-2.4.67-0.1.hum1 (noarch) * httpd-tools-2.4.67-0.1.hum1 (aarch64, x86_64) * mod_ldap-2.4.67-0.1.hum1 (aarch64, x86_64) * mod_lua-2.4.67-0.1.hum1 (aarch64, x86_64) * mod_proxy_html-2.4.67-0.1.hum1 (aarch64, x86_64) * mod_session-2.4.67-0.1.hum1 (aarch64, x86_64) * mod_ssl-2.4.67-0.1.hum1 (aarch64, x86_64) * httpd-2.4.67-0.1.hum1.src (src) Join the discussion | GCVE Database | 05/06/2026, 08:55:25 UTC Added: 06/10/2026, 11:41:58 UTC |
Red Hat Security Advisory: httpd:2.4 security updateCVE-2025-53020 0 The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) * httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) * httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) * httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) * httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash (CVE-2026-33007) * Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Join the discussion | GCVE Database | 06/01/2026, 02:43:57 UTC Added: 06/01/2026, 21:15:20 UTC |
Apache HTTP Server: Mehrere SchwachstellenCVE-2026-28780 0 Apache ist ein Webserver für verschiedene Plattformen. Join the discussion | GCVE Database | 05/04/2026, 22:00:00 UTC Added: 05/28/2026, 20:54:07 UTC |
Red Hat Security Advisory: httpd security updateCVE-2026-28780 0 The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) * httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) * httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) * httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash (CVE-2026-33007) * Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Join the discussion | GCVE Database | 05/27/2026, 21:42:31 UTC Added: 05/28/2026, 20:54:07 UTC |
CVE-2026-33007: CWE-476 NULL Pointer Dereference in Apache Software Foundation Apache HTTP ServerCVE-2026-33007 0 CVE-2026-33007 is a medium severity vulnerability in Apache HTTP Server versions 2.4.66 and earlier. It involves a NULL pointer dereference in the mod_authn_socache module that can be triggered by an unauthenticated remote user. This flaw allows crashing a child process when the server is configured as a caching forward proxy. The issue does not impact confidentiality or integrity but causes a denial of service by affecting availability. Users are advised to upgrade to Apache HTTP Server version 2.4.67, which addresses this vulnerability. Join the discussion | CVE Database V5 | 05/04/2026, 14:41:27 UTC Added: 05/04/2026, 15:06:25 UTC |
Showing 1 to 5 of 5 results