{"affected":[{"defaultStatus":"unaffected","product":"Apache HTTP Server","source":"CNA: apache","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"2.4.70","status":"affected","version":"2.4.30","versionType":"semver"}]}],"cveId":"CVE-2026-106023","cwes":["CWE-476"],"description":"NULL pointer dereference vulnerability in Apache HTTP Server's mod_md during HTTP request processing.\n\n\n\nThis issue affects Apache HTTP Server: from 2.4.30 through 2.4.69.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1794408926491,"publishedAt":1794408926491,"references":[{"source":"CNA: apache","tags":["vendor-advisory"],"url":"https://httpd.apache.org/security/vulnerabilities_24.html"}],"remediation":[],"revision":"d215db9d3e207b23ae84bc2979184d87e1445e4e63679ad7d477ffa2fc2a68f7","sources":[{"modifiedAt":1794408926491,"name":"CNA: apache","retrievedAt":1794409705960,"url":"https://www.cve.org/CVERecord?id=CVE-2026-106023"}],"ssvc":null,"status":"published","title":"Apache HTTP Server: mod_md NULL pointer dereference leads to child process crash","updatedAt":1794409705960}