CVE-2026-33857

Apache HTTP Server versions through 2.4.66 are vulnerable to an out-of-bounds read vulnerability within the mod_proxy_ajp module. The root cause involves off-by-one length check errors in the ajp_msg_get_uint8/uint16/uint32 and ajp_msg_peek_uint8/uint16 functions. A remote attacker could exploit ...