Unrated
NULL pointer dereference vulnerability in Apache HTTP Server's mod_md during HTTP request...
CVE-2026-106023
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Apache Software FoundationApache HTTP Server |
2.4.30 – 2.4.70→ Not listed |
Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Fix status by distribution
Records published by each distribution for this CVE. Fixed versions differ by release; check each link.
- Debian DEBIAN-CVE-2026-106023 apache2 No fixed version in this record
Original description The description as published by the source.
NULL pointer dereference vulnerability in Apache HTTP Server's mod_md during HTTP request processing.
This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69.
Source: Security Online NVD GitHub Advisory
References
- SECURITYONLINE CVE-2026-119618: Apache HTTP Server Remote Code Execution Fixed in 2.4.71
- web httpd.apache.org
- web nvd.nist.gov
- web github.com
- web openwall.com