Report: Essential Guide: CVE-2025-59028 - Apache HTTP Server Base64 SASL Authentication Denial of Service

Report: Essential Guide: CVE-2025-59028 - Apache HTTP Server Base64 SASL Authentication Denial of Service

CVE ID :CVE-2025-59028 Published : March 27, 2026, 9:16 a.m. | 23 minutes ago Description :When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. Install fixed version or disable concurrency in login processes (heavy perfomance penalty on large deployments). No publicly available exploits are known. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
March 27, 2026
Impact: DoS