A vulnerability was found in Apache HTTP Server up to 2.4.66. It has been rated as critical. This issue affects some unknown processing of the component Module. Performing a manipulation results in http response splitting.

This vulnerability is cataloged as CVE-2026-33523. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.