Apache mod_session heap overflow (CVE-2021-26691)

Summary

A heap overflow in mod_session allows for remote code execution.

Vulnerability ID	Vulnerability Overview
CVE-2021-26691	A crafted SessionHeader sent to an Apache server using mod_session causes a heap buffer overflow, potentially allowing unauthenticated remote code execution.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/09/2026	Initial release

Back to Security Notices