Debian/apache2: high 7.3

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via c

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: DEBIAN-CVE-2026-73637
• https://security-tracker.debian.org/tracker/CVE-2026-73637

published 2026-10-01T17:17:31Z · modified 2026-10-16T23:00:07.212880241Z · JSON