CVE-2026-106023

Apache HTTP Server: mod_md NULL pointer dereference leads to child process crash

Unrated

Apache HTTP Server

Published Nov 11, 2026, 14:55 UTC

Description

NULL pointer dereference vulnerability in Apache HTTP Server's mod_md during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69.

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.