CVE-2026-106023

Description

NULL pointer dereference vulnerability in Apache HTTP Server's mod_md during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69.

References

https://httpd.apache.org/security/vulnerabilities_24.html

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-123534

http://www.openwall.com/lists/oss-security/2026/11/11/11

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3