Latest vulnerabilities for "apache traffic server"

Apache Traffic ServerApache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode

Risk 30

Severity

6.3

First published (updated )

CVE-2026-65100

Apache Traffic ServerApache Traffic Server: Plugins resetting the redirect counter enable SSRF amplification

Risk 43

Severity

8.2

First published (updated )

CVE-2026-58189

Apache Traffic ServerApache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins

Risk 69

Severity

8.4

First published (updated )

CVE-2026-58188

Apache Traffic ServerApache Traffic Server: Multiplexer plugin chunk decoder enables a denial of service

Risk 43

Severity

6.3

First published (updated )

CVE-2026-58187

Apache Traffic ServerApache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responses

Risk 43

Severity

8.2

First published (updated )

CVE-2026-58186

Apache Traffic ServerApache Traffic Server: Use-after-free in the intercept plugin

Risk 86

Severity

8.2

First published (updated )

CVE-2026-58185

Apache Traffic ServerApache Traffic Server: header_rewrite plugin cookie handling can corrupt memory

Risk 52

Severity

8.3

First published (updated )

CVE-2026-58184

Apache Traffic ServerApache Traffic Server: prefetch plugin can crash on attacker-influenced input

Risk 43

Severity

8.2

First published (updated )

CVE-2026-58183

Apache Traffic ServerApache Traffic Server: ts_lua plugin has initialization and resource-handling errors

Risk 64

Severity

8.2

First published (updated )

CVE-2026-58182

Apache Traffic ServerApache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash

Risk 43

Severity

8.2

First published (updated )

CVE-2026-58181

Apache Traffic ServerApache Traffic Server: txn_box plugin overflows the stack from attacker input

Risk 43

Severity

8.2

First published (updated )

CVE-2026-58180

Apache Traffic ServerApache Traffic Server: regex_remap plugin overflows the stack from attacker input

Risk 86

Severity

9.2

First published (updated )

CVE-2026-58179

Apache Traffic ServerApache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery

Risk 43

Severity

8.2

First published (updated )

CVE-2026-58178

Apache Traffic ServerApache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

Risk 86

Severity

8.3

First published (updated )

CVE-2026-58177

Apache Traffic ServerApache Traffic Server: HostDB SRV handling leaks memory

Risk 43

Severity

8.2

First published (updated )

CVE-2026-58175

Apache Traffic ServerApache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free

Risk 60

Severity

8.3

First published (updated )

CVE-2026-58164

Apache Traffic ServerApache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server

Risk 66

Severity

8.3

First published (updated )

CVE-2026-58163

Apache Traffic ServerApache Traffic Server: Certifier plugin trusts client SNI when generating certificates

Risk 82

Severity

8.4

First published (updated )

CVE-2026-58162

Apache Traffic ServerApache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the server

Risk 80

Severity

9.2

First published (updated )

CVE-2026-58161

Apache Traffic ServerApache Traffic Server: Out-of-bounds reads while parsing DNS responses

Risk 40

Severity

6.3

First published (updated )

CVE-2026-58160

Apache Traffic ServerApache Traffic Server: Listener and ACL handling allow access-control bypass

Risk 54

Severity

7

First published (updated )

CVE-2026-58159

Apache Traffic ServerApache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow

Risk 43

Severity

8.2

First published (updated )

CVE-2026-58158

Apache Traffic ServerApache Traffic Server: Improper server-session reuse can expose data across client connections

Risk 64

Severity

6.9

First published (updated )

CVE-2026-58157

Apache Traffic ServerApache Traffic Server: URL and port parsing errors allow access-control bypass

Risk 39

Severity

6.3

First published (updated )

CVE-2026-58156

Apache Traffic ServerApache Traffic Server: Header-name length truncation enables header aliasing and request smuggling

Risk 61

Severity

9.2

First published (updated )

CVE-2026-58155

Apache Traffic ServerApache Traffic Server: Memory-safety errors in MIME and header parsing

Risk 80

Severity

9.2

First published (updated )

CVE-2026-58154

Apache Traffic ServerApache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification

Risk 39

Severity

6.3

First published (updated )

CVE-2026-65325

Apache Traffic ServerApache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustion

Risk 43

Severity

8.2

First published (updated )

CVE-2026-65324

Apache Traffic ServerApache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafely

Risk 57

Severity

6.3

First published (updated )

CVE-2026-58153

Apache Traffic ServerApache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memory

Risk 33

Severity

6.9

First published (updated )

CVE-2026-58152

Trending

Versions

Apache Traffic ServerApache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode

Apache Traffic ServerApache Traffic Server: Plugins resetting the redirect counter enable SSRF amplification

Apache Traffic ServerApache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins

Apache Traffic ServerApache Traffic Server: Multiplexer plugin chunk decoder enables a denial of service

Apache Traffic ServerApache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responses

Don't miss critical vulnerabilities

Apache Traffic ServerApache Traffic Server: Use-after-free in the intercept plugin

Apache Traffic ServerApache Traffic Server: header_rewrite plugin cookie handling can corrupt memory

Apache Traffic ServerApache Traffic Server: prefetch plugin can crash on attacker-influenced input

Apache Traffic ServerApache Traffic Server: ts_lua plugin has initialization and resource-handling errors

Apache Traffic ServerApache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash

Don't miss critical vulnerabilities

Apache Traffic ServerApache Traffic Server: txn_box plugin overflows the stack from attacker input

Apache Traffic ServerApache Traffic Server: regex_remap plugin overflows the stack from attacker input

Apache Traffic ServerApache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery

Apache Traffic ServerApache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

Apache Traffic ServerApache Traffic Server: HostDB SRV handling leaks memory

Don't miss critical vulnerabilities

Apache Traffic ServerApache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free

Apache Traffic ServerApache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server

Apache Traffic ServerApache Traffic Server: Certifier plugin trusts client SNI when generating certificates

Apache Traffic ServerApache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the server

Apache Traffic ServerApache Traffic Server: Out-of-bounds reads while parsing DNS responses

Don't miss critical vulnerabilities

Apache Traffic ServerApache Traffic Server: Listener and ACL handling allow access-control bypass

Apache Traffic ServerApache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow

Apache Traffic ServerApache Traffic Server: Improper server-session reuse can expose data across client connections

Apache Traffic ServerApache Traffic Server: URL and port parsing errors allow access-control bypass

Apache Traffic ServerApache Traffic Server: Header-name length truncation enables header aliasing and request smuggling

Don't miss critical vulnerabilities

Apache Traffic ServerApache Traffic Server: Memory-safety errors in MIME and header parsing

Apache Traffic ServerApache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification

Apache Traffic ServerApache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustion

Apache Traffic ServerApache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafely

Apache Traffic ServerApache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memory

Don't miss critical vulnerabilities

Company

Resources

Contact