System	Score	Found at
cvssv3	7.5	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-33857.json
epss	0.00247	https://api.first.org/data/v1/epss?cve=CVE-2026-33857
cvssv3.1	5.3	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1	5.3	https://httpd.apache.org/security/vulnerabilities_24.html
ssvc	Track	https://httpd.apache.org/security/vulnerabilities_24.html

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-33857.json
		https://api.first.org/data/v1/epss?cve=CVE-2026-33857
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33857
		https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1135737		https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1135737
2464953		https://bugzilla.redhat.com/show_bug.cgi?id=2464953
CVE-2026-33857		https://httpd.apache.org/security/json/CVE-2026-33857.json
RHSA-2026:21391		https://access.redhat.com/errata/RHSA-2026:21391
RHSA-2026:21433		https://access.redhat.com/errata/RHSA-2026:21433
RHSA-2026:22140		https://access.redhat.com/errata/RHSA-2026:22140
USN-8239-1		https://usn.ubuntu.com/8239-1/

No exploits are available.

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-33857.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://httpd.apache.org/security/vulnerabilities_24.html

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

---

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-04T13:58:58Z/ Found at https://httpd.apache.org/security/vulnerabilities_24.html

---

Percentile	0.4823
EPSS Score	0.00247
Published At	June 5, 2026, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2026-06-02T04:53:52.300600+00:00	Apache HTTPD Importer	Import	https://httpd.apache.org/security/json/CVE-2026-33857.json	38.6.0