Medium 2 vendors · 2 advisories

CVE-2026-33006

Unified cross-vendor view: this CVE is referenced by 2 tracked vendors. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

Apache1 advisory

Medium4.8Apache HTTP Server: timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a re…May 4, 2026

Linux1 advisory

Medium4.8timing attack allows a bypass of digest authenticationMay 4, 2026