onyx --cves cve-2026-33523

CVE-2026-33523

score: <0.1
cvss: 6.5
epss: 0.4%
published: 2026-05-04
kev added: —
first seen: 2026-10-21

Apache HTTP Server <= 2.4.66 contains an HTTP response splitting vulnerability caused by improper handling of responses from untrusted or compromised backend servers, letting attackers manipulate HTTP headers, exploit requires untrusted or compromised backend.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2026-05-04 Published
2026-10-21 Tracked by Onyx

Weaknesses

CWE-443 NVD-CWE-Other

References 2

http://www.openwall.com/lists/oss-security/2026/05/04/23
https://httpd.apache.org/security/vulnerabilities_24.html