CVE-2026-106023

Published 11 November 2026 · tracked since 12 November 2026

Description

NULL pointer dereference vulnerability in Apache HTTP Server's mod_md during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-107152 HIGH 7.1
• CVE-2024-36344
• CVE-2026-126838 MEDIUM 5.5
• CVE-2026-121619
• CVE-2026-120467
• CVE-2026-117544
• CVE-2026-117542
• CVE-2026-0436
• CVE-2026-81843 MEDIUM 6.5
• CVE-2026-127204 HIGH 7.5

→ Open the live CVE board · all tools