Apache HTTP Server mod_authn_socache denial of service (CVE-2026-33007)

Oct 14, 2026

An unauthenticated request may crash a caching forward proxy process.

Vulnerability ID	Vulnerability Overview
CVE-2026-33007	Timing differences in mod_auth_digest authentication processing can expose information useful to a remote attacker attempting to bypass Digest authentication.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16

Date	Description
10/14/2026	Initial release