Apache HTTP Server EUVD-2026-26963

Upgrade to Apache HTTP Server 2.4.67 or later immediately - this is the definitive fix provided by the vendor. For organizations unable to upgrade immediately, disable mod_authn_socache if not actively used for authentication caching, or disable forward proxy functionality if the caching feature is not critical to operations. If both features are required for business purposes, implement network-level access controls to restrict untrusted traffic to the proxy service, limiting who can send crafted requests that trigger the NULL pointer dereference. This compensating control reduces attack surface but does not eliminate the vulnerability if internal users or compromised systems have proxy access. See vendor advisory at https://httpd.apache.org/security/vulnerabilities_24.html for additional details and upgrade instructions.