| CVE-2026-58181 |
The Apache Traffic Server uri_signing and url_sig plugins can exhaust the stack or crash on attacker input
|
7.5
High
|
Jul 29, 2026 |
| CVE-2026-58180 |
The Apache Traffic Server txn_box plugin overflows the stack from attacker-controlled input
|
7.5
High
|
Jul 29, 2026 |
| CVE-2026-58179 |
The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution input
|
8.1
High
|
Jul 29, 2026 |
| CVE-2026-58178 |
The Apache Traffic Server ESI plugin can recurse without bound and fetch attacker-controlled URLs
|
7.5
High
|
Jul 29, 2026 |
| CVE-2026-58177 |
The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors
|
8.1
High
|
Jul 29, 2026 |
| CVE-2026-58175 |
Apache Traffic Server leaks memory when handling HostDB SRV records
|
7.5
High
|
Jul 29, 2026 |
| CVE-2026-58164 |
Apache Traffic Server has use-after-free and time-of-check/time-of-use errors in remap configuration handling
|
7.5
High
|
Jul 29, 2026 |
| CVE-2026-58163 |
Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corrupting state or crashing
|
7.5
High
|
Jul 29, 2026 |
| CVE-2026-58162 |
The Apache Traffic Server certifier plugin generates certificates based on attacker-controlled client SNI
|
10.0
Critical
|
Jul 29, 2026 |
| CVE-2026-58161 |
Apache Traffic Server can crash from null dereferences and dangling references in TLS and SNI handling
|
7.5
High
|
Jul 29, 2026 |
| CVE-2026-58160 |
Apache Traffic Server reads out of bounds while parsing DNS answers
|
6.5
Medium
|
Jul 29, 2026 |
| CVE-2026-58159 |
Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors
|
8.2
High
|
Jul 29, 2026 |
| CVE-2026-58158 |
Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack
|
5.9
Medium
|
Jul 29, 2026 |
| CVE-2026-58157 |
Apache Traffic Server can reuse server sessions and tunnels improperly, exposing data across client connections
|
8.7
High
|
Jul 29, 2026 |
| CVE-2026-58156 |
Apache Traffic Server mis-parses ports in URLs and userinfo, allowing port-based access-control bypass
|
4.9
Medium
|
Jul 29, 2026 |
| CVE-2026-58155 |
Apache Traffic Server truncates over-long header names, allowing header aliasing, request smuggling, and policy bypass
|
9.3
Critical
|
Jul 29, 2026 |
| CVE-2026-58154 |
Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP headers
|
8.9
High
|
Jul 29, 2026 |
| CVE-2026-65325 |
Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the…
|
4.8
Medium
|
Jul 29, 2026 |
| CVE-2026-65324 |
Apache Traffic Server drops the per-stream buffer cap when dechunking HTTP/2 or HTTP/3 responses, letting a slow…
|
7.5
High
|
Jul 29, 2026 |
| CVE-2026-58153 |
Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting…
|
8.3
High
|
Jul 29, 2026 |
| CVE-2026-58152 |
Apache Traffic Server mishandles integers while decoding HPACK/XPACK headers, corrupting memory
|
5.9
Medium
|
Jul 29, 2026 |
| CVE-2026-58151 |
Apache Traffic Server can be crashed or driven to resource exhaustion by abusive HTTP/2 framing and flow-control
|
7.5
High
|
Jul 29, 2026 |
| CVE-2026-58150 |
Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade request smuggling
|
10.0
Critical
|
Jul 29, 2026 |
| CVE-2026-57834 |
Apache Traffic Server allows request smuggling if chunked messages are malformed
|
10.0
Critical
|
Jul 29, 2026 |
| CVE-2026-33930 |
Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect…
|
5.9
Medium
|
Jul 29, 2026 |