PT-2026-103940

🗓️ 01 Oct 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 9 Views

Authentication bypass via capture-replay in Apache HTTP Server mod_auth_digest.

Reporter	Title	Published	Views	Family All 78
Tenable Nessus	Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2026-3202)	12 Oct 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : httpd (ALAS-2026-3990)	12 Oct 202600:00	–	nessus
Tenable Nessus	Apache 2.4.x < 2.4.69 Multiple Vulnerabilities	2 Oct 202600:00	–	nessus
Tenable Nessus	Debian dsa-6569 : apache2 - security update	17 Oct 202600:00	–	nessus
Tenable Nessus	FreeBSD : Apache httpd -- Multiple vulnerabilities (ed670f20-bdc3-11f1-a6ea-8447094a420f)	1 Oct 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9.2 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791538487)	9 Oct 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9.6 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791889844)	20 Oct 202600:00	–	nessus
Tenable Nessus	CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1791459292)	8 Oct 202600:00	–	nessus
Tenable Nessus	CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1791458607)	8 Oct 202600:00	–	nessus
Tenable Nessus	CentOS Linux 8 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1791914243)	13 Oct 202600:00	–	nessus

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-73636
osv	www.osv.dev/vulnerability/ALPINE-CVE-2026-73636
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
ubuntu	www.ubuntu.com/security/CVE-2026-63718
osv	www.osv.dev/vulnerability/DEBIAN-CVE-2026-73636
security	www.security.alpinelinux.org/vuln/CVE-2026-73636
docs	www.docs.bell-sw.com/security/cves/CVE-2026-73636
osv	www.osv.dev/vulnerability/BIT-apache-2026-73636
osv	www.osv.dev/vulnerability/USN-8931-1
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2026-73636

14 Oct 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.18.1

EPSS0.00484

SSVC

Apache HTTP Server mod_auth_digest authentication bypass capture-replay AuthDigestNonceLifetime