{"id":"CVE-2026-106023","kind":"vulnerability","aliases":["CVE-2026-106023"],"related":[],"title":"Apache HTTP Server: mod_md null pointer crash during request processing","description":"NULL pointer dereference vulnerability in Apache HTTP Server's mod_md during HTTP request processing.\n\n\n\nThis issue affects Apache HTTP Server: from 2.4.30 through 2.4.69.","summary":"A NULL pointer dereference in Apache HTTP Server's mod_md module can crash the server while it handles an HTTP request. The sources do not say whether an attacker can use it for more than a denial of service.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Apache HTTP Server","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apache-httpd","mod_md","runtime","self-hosted"],"not_affected_if":["mod_md-not-loaded","version-outside-2.4.30-2.4.69"],"how_to_check":"- Check the installed version with `httpd -v` and compare it to the affected range 2.4.30 through 2.4.69.\n- Check whether mod_md is loaded with `httpd -M | grep md_module` (Debian/Ubuntu: `apache2ctl -M`).","fix":"- Apache HTTP Server: unknown; the sources do not name a fixed version.","status":"open","published_at":"2026-11-11T15:17:13+00:00","first_seen_at":"2026-11-11T15:27:49+00:00","triaged_at":"2026-11-11T15:30:07+00:00","updated_at":"2026-11-11T15:30:07+00:00","category":"runtime","confidence":0.4,"triage":{"at":"2026-11-11T15:30:07Z","model":"claude-haiku-5-5","output":{"fix":"- Apache HTTP Server: unknown; the sources do not name a fixed version.","reach":"internet","title":"Apache HTTP Server: mod_md null pointer crash during request processing","impact":"medium","summary":"A NULL pointer dereference in Apache HTTP Server's mod_md module can crash the server while it handles an HTTP request. The sources do not say whether an attacker can use it for more than a denial of service.","audience":"businesses","category":"runtime","nicknames":[],"who_cares":["apache-httpd","mod_md","self-hosted"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown; a remote request may crash the server process","analyst_note":"Confirm the fixed version, whether mod_md is enabled by default, and whether the flaw is only a crash or allows more, using the NVD entry and the Apache HTTP Server security advisories.","how_to_check":"- Check the installed version with `httpd -v` and compare it to the affected range 2.4.30 through 2.4.69.\n- Check whether mod_md is loaded with `httpd -M | grep md_module` (Debian/Ubuntu: `apache2ctl -M`).","plain_action":"","product_name":"Apache HTTP Server","needs_analyst":true,"not_affected_if":["version-outside-2.4.30-2.4.69","mod_md-not-loaded"],"who_is_affected":"Servers running Apache HTTP Server from 2.4.30 through 2.4.69 that load the mod_md module are in the affected range. The sources do not say whether the flaw is reachable by default or only with specific settings, so unknown. Servers running other versions or without mod_md are not in the stated range.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000773,"input_tokens":4515,"output_tokens":643,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-106023':14A,17A '-2026':13A,16A '2.4.30':92C '2.4.69':94C 'affect':87C 'apach':1A,22B,35B,75C,88C 'apache':18A 'apache-httpd':21B 'attack':59B 'crash':8A,43B 'cve':12A,15A 'denial':67B 'derefer':33B,72C 'handl':48B 'host':29B 'http':2A,19A,36B,50B,76C,82C,89C 'httpd':23B 'issu':86C 'md':5A,25B,40B,80C 'mod':4A,24B,39B,79C 'modul':41B 'null':6A,31B,70C 'pointer':7A,32B,71C 'process':11A,84C 'request':10A,51B,83C 'runtim':26B 'say':56B 'self':28B 'self-host':27B 'server':3A,20A,37B,45B,77C,90C 'servic':69B 'sourc':53B 'use':61B 'vulner':73C 'whether':57B","nicknames":[],"mitigations":[],"who_affected":"Servers running Apache HTTP Server from 2.4.30 through 2.4.69 that load the mod_md module are in the affected range. The sources do not say whether the flaw is reachable by default or only with specific settings, so unknown. Servers running other versions or without mod_md are not in the stated range.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["apachehttpserver","httpserver"],"ptokens":["apache","http","server"],"labels":["apachehttpd","modmd","runtime","selfhosted","unknown","vendor"],"campaign_type":null,"search_a":"'-106023':14A,17A '-2026':13A,16A 'apach':1A 'apache':18A 'crash':8A 'cve':12A,15A 'http':2A,19A 'md':5A 'mod':4A 'null':6A 'pointer':7A 'process':11A 'request':10A 'server':3A,20A","search_b":"'apach':22B,35B 'apache-httpd':21B 'attack':59B 'crash':43B 'denial':67B 'derefer':33B 'handl':48B 'host':29B 'http':36B,50B 'httpd':23B 'md':25B,40B 'mod':24B,39B 'modul':41B 'null':31B 'pointer':32B 'request':51B 'runtim':26B 'say':56B 'self':28B 'self-host':27B 'server':37B,45B 'servic':69B 'sourc':53B 'use':61B 'whether':57B","search_c":"'2.4.30':92C '2.4.69':94C 'affect':87C 'apach':75C,88C 'derefer':72C 'http':76C,82C,89C 'issu':86C 'md':80C 'mod':79C 'null':70C 'pointer':71C 'process':84C 'request':83C 'server':77C,90C 'vulner':73C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T15:17:13+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-106023","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106023","severity":null,"published_at":"2026-11-11T15:17:13+00:00","modified_at":"2026-11-11T15:17:13+00:00","first_seen_at":"2026-11-11T15:27:49+00:00","fetched_at":"2026-11-11T15:27:49+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}