Apache HTTP Server Digest authentication timing attack (CVE-2026-33006)

Summary

A timing attack may bypass Digest authentication.

Vulnerability ID	Vulnerability Overview
CVE-2026-33006	Timing differences in mod_auth_digest authentication processing can expose information useful to a remote attacker attempting to bypass Digest authentication.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16
 

 

Back to Security Notices

Date	Description
10/14/2026	Initial release

Back to Security Notices