IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-05-04 15:16

MODIFIED

2026-05-04 15:21

EPSS (Prob. Exploit)

0.44%

Top 61.9%

DATA SOURCES:

NVD 🔗 2026-05-04 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-02 MSRC 🔗 2026-11-02

> DESCRIPTION

HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers. This issue affects Apache HTTP Server: from through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-443

> CWE DETAILED DESCRIPTIONS

CWE-443: DEPRECATED: HTTP response splitting - This weakness can be found at CWE-113.

> RED HAT SECURITY ADVISORIES

RHSA-2026:17080 MODERATE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available.

RHSA-2026:73076 MODERATE

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP6 security update

Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 6 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability S...

RHSA-2026:73077 MODERATE

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP6 security update

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line

AFFECTED PACKAGES:

Unknown / Unknown

2 versions affected

ALIASES:

BIT-apache-2026-33523

> HISTORIQUE DES MODIFICATIONS

Première apparition

04/05/2026 15:16

Source: NVD

📊 ENRICHISSEMENT 01/06/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur: