ID:12727 - Exploit for Information Exposure Through Timing Discrepancy in Apache HTTP Server - CVE-2026-33006

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to bypass Digest authentication.

The vulnerability exists due to a timing side-channel in mod_auth_digest when processing Digest authentication. A remote attacker can perform a timing attack to bypass Digest authentication.

Remediation