Red Hat Security Advisory

RHSA-2026:73077

Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP6 security update

Released 2026-09-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2026-25916 CVE-2026-33523 · GHSA-fc75-39v4-qm5p

LOW 35

HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00436 Published 2026-05-04 Partial fix CWE-443

TI-2026-25454 CVE-2026-33006 · GHSA-r3x7-65m7-5p92

LOW 23

A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00557 Published 2026-05-04 Partial fix CWE-208