Apache HTTP Server HTTP response splitting (CVE-2026-33523)

Summary

Untrusted backend responses may cause HTTP response splitting.

Vulnerability ID	Vulnerability Overview
CVE-2026-33523	Multiple Apache modules can mishandle responses from malicious or compromised backend servers. Crafted response content can alter response boundaries and cause HTTP response splitting.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16
 

 

Back to Security Notices

Date	Description
10/14/2026	Initial release

Back to Security Notices