Apache Software Foundation Apache Traffic Server

• CVE-2026-112381 Medium 5.9 Apache Traffic Server: Nullptr dereference in net_write_io on a POST half-close with chunked response 0.4%
• CVE-2026-111817 Medium 5.3 Apache Traffic Server: Dropping chunked trailers stalls a passthrough transfer until timeout 0.4%
• CVE-2026-111812 Critical 10.0 Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials 0.4%
• CVE-2026-111811 Critical 9.0 Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication 0.4%
• CVE-2026-111809 Critical 9.3 Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smuggling 0.2%
• CVE-2026-111810 High 7.5 Apache Traffic Server: Unthrottled per-header diagnostic logging enables a log-flood denial of service 0.4%
• CVE-2026-111815 Critical 10.0 Apache Traffic Server: TLS session ticket resumption bypasses per-SNI verify_client STRICT enforcement 0.2%
• CVE-2026-111814 Critical 10.0 Apache Traffic Server: Default server_session_sharing.match omits MASK_CERT, allowing pooled mTLS identity confusion at the origin 0.2%
• CVE-2026-111808 High 8.6 Apache Traffic Server: HTTP/2 DATA frame padding underflow lets a client trigger backend worker-pool exhaustion 0.4%
• CVE-2026-111805 High 8.6 Apache Traffic Server: HTTP/2 Content-Length truncation lets a client trigger backend worker-pool exhaustion 0.4%
• CVE-2026-111816 Critical 9.3 Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-out 0.3%
• CVE-2025-55702 High 8.7 Apache Traffic Server: An unread Expect: 100-continue request body is framed as a new request 0.3%
• CVE-2025-31699 High 8.9 Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smuggling 0.3%
• CVE-2026-111804 High 8.2 Apache Traffic Server: wasm plugin has a use-after-free and forwards unvalidated guest metric IDs 0.3%
• CVE-2026-111813 Critical 10.0 Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration 0.5%
• CVE-2026-102795 Critical 9.3 Apache Traffic Server: SNI to Host header matching policy is not properly enforced 0.3%
• CVE-2026-65100 Medium 4.8 Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode 0.6%
• CVE-2026-58189 High 7.5 Apache Traffic Server: Plugins resetting the redirect counter enable SSRF amplification 0.6%
• CVE-2026-58188 High 8.2 Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins 0.8%
• CVE-2026-58187 Low 3.7 Apache Traffic Server: Multiplexer plugin chunk decoder enables a denial of service 0.6%
• CVE-2026-58186 High 7.5 Apache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responses 0.7%
• CVE-2026-58185 Medium 5.9 Apache Traffic Server: Use-after-free in the intercept plugin 0.6%
• CVE-2026-58184 High 8.2 Apache Traffic Server: header_rewrite plugin cookie handling can corrupt memory 0.6%
• CVE-2026-58183 Medium 5.9 Apache Traffic Server: prefetch plugin can crash on attacker-influenced input 0.7%
• CVE-2026-58182 High 8.6 Apache Traffic Server: ts_lua plugin has initialization and resource-handling errors 0.7%
• CVE-2026-58181 High 7.5 Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash 0.7%
• CVE-2026-58180 High 7.5 Apache Traffic Server: txn_box plugin overflows the stack from attacker input 0.7%
• CVE-2026-58179 High 8.1 Apache Traffic Server: regex_remap plugin overflows the stack from attacker input 0.6%
• CVE-2026-58178 High 7.5 Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery 0.7%
• CVE-2026-58177 High 8.1 Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework 0.6%
• CVE-2026-58175 High 7.5 Apache Traffic Server: HostDB SRV handling leaks memory 0.7%
• CVE-2026-58164 High 7.5 Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free 0.7%
• CVE-2026-58163 High 7.5 Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server 0.7%
• CVE-2026-58162 Critical 10.0 Apache Traffic Server: Certifier plugin trusts client SNI when generating certificates 0.4%
• CVE-2026-58161 High 7.5 Apache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the server 0.7%
• CVE-2026-58160 Medium 6.5 Apache Traffic Server: Out-of-bounds reads while parsing DNS responses 0.6%
• CVE-2026-58159 High 8.2 Apache Traffic Server: Listener and ACL handling allow access-control bypass 0.6%
• CVE-2026-58158 Medium 5.9 Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow 0.6%
• CVE-2026-58157 High 8.7 Apache Traffic Server: Improper server-session reuse can expose data across client connections 0.5%
• CVE-2026-58156 Medium 4.9 Apache Traffic Server: URL and port parsing errors allow access-control bypass 0.4%
• CVE-2026-58155 Critical 9.3 Apache Traffic Server: Header-name length truncation enables header aliasing and request smuggling 0.5%
• CVE-2026-58154 High 8.9 Apache Traffic Server: Memory-safety errors in MIME and header parsing 0.5%
• CVE-2026-65325 Medium 4.8 Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification 0.3%
• CVE-2026-65324 High 7.5 Apache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustion 0.7%
• CVE-2026-58153 High 8.3 Apache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafely 0.6%
• CVE-2026-58152 Medium 5.9 Apache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memory 0.6%
• CVE-2026-58151 High 7.5 Apache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the server 0.7%
• CVE-2026-58150 Critical 10.0 Apache Traffic Server: HTTP/2 requests with Transfer-Encoding are not rejected, allowing request smuggling 0.6%
• CVE-2026-57834 Critical 10.0 Apache Traffic Server: Malformed chunked message body allows request smuggling 0.6%
• CVE-2026-33930 Medium 5.9 Apache Traffic Server: Buffer overflow via Host field that has a long string value 0.6%