| CVE-2026-112381 |
Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close…
|
5.9
Medium
|
Oct 21, 2026 |
| CVE-2026-111817 |
Apache Traffic Server can stall a chunked transfer that it passes through with its trailers removed…
|
5.3
Medium
|
Oct 21, 2026 |
| CVE-2026-111812 |
Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers…
|
10.0
Critical
|
Oct 21, 2026 |
| CVE-2026-111811 |
Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the…
|
9.0
Critical
|
Oct 21, 2026 |
| CVE-2026-111809 |
Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transfer-Encoding
|
9.3
Critical
|
Oct 21, 2026 |
| CVE-2026-111810 |
Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every internal @ header…
|
7.5
High
|
Oct 21, 2026 |
| CVE-2026-111815 |
Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate…
|
10.0
Critical
|
Oct 21, 2026 |
| CVE-2026-111814 |
Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one…
|
10.0
Critical
|
Oct 21, 2026 |
| CVE-2026-111808 |
Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a malformed padded HTTP/2 DATA frame
|
8.6
High
|
Oct 21, 2026 |
| CVE-2026-111805 |
Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a truncated HTTP/2 Content-Length…
|
8.6
High
|
Oct 21, 2026 |
| CVE-2026-111816 |
Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the…
|
9.3
Critical
|
Oct 21, 2026 |
| CVE-2025-55702 |
When a client sends a POST with Expect: 100-continue and the origin answers before reading the body, Apache Traffic…
|
8.7
High
|
Oct 21, 2026 |
| CVE-2025-31699 |
Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a…
|
8.9
High
|
Oct 21, 2026 |
| CVE-2026-111804 |
Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards…
|
8.2
High
|
Oct 21, 2026 |
| CVE-2026-111813 |
Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert…
|
10.0
Critical
|
Oct 21, 2026 |
| CVE-2026-102795 |
Improper Access Control vulnerability in Apache Traffic Server
|
9.3
Critical
|
Oct 2, 2026 |
| CVE-2026-65100 |
Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so…
|
4.8
Medium
|
Jul 29, 2026 |
| CVE-2026-58189 |
Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification
|
7.5
High
|
Jul 29, 2026 |
| CVE-2026-58188 |
Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors
|
8.2
High
|
Jul 29, 2026 |
| CVE-2026-58187 |
The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of…
|
3.7
Low
|
Jul 29, 2026 |
| CVE-2026-58186 |
The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable responses
|
7.5
High
|
Jul 29, 2026 |
| CVE-2026-58185 |
The Apache Traffic Server intercept plugin has a use-after-free
|
5.9
Medium
|
Jul 29, 2026 |
| CVE-2026-58184 |
The Apache Traffic Server header_rewrite plugin can crash or corrupt memory during cookie operations and CIDR…
|
8.2
High
|
Jul 29, 2026 |
| CVE-2026-58183 |
The Apache Traffic Server prefetch plugin can crash when processing attacker-influenced input
|
5.9
Medium
|
Jul 29, 2026 |
| CVE-2026-58182 |
The Apache Traffic Server ts_lua plugin mishandles initialization, transform context, and per-instance state
|
8.6
High
|
Jul 29, 2026 |