Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apache Traffic ServerApache Traffic Server: Plugins resetting the redirect counter enable SSRF amplification

Risk 43
Severity
8.2
First published (updated )
CVE-2026-58189

Apache Traffic ServerApache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins

Risk 69
Severity
8.4
First published (updated )
CVE-2026-58188

Apache Traffic ServerApache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responses

Risk 43
Severity
8.2
First published (updated )
CVE-2026-58186

Apache Traffic ServerApache Traffic Server: Use-after-free in the intercept plugin

Risk 86
Severity
8.2
First published (updated )
CVE-2026-58185

Apache Traffic ServerApache Traffic Server: header_rewrite plugin cookie handling can corrupt memory

Risk 52
Severity
8.3
First published (updated )
CVE-2026-58184
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache Traffic ServerApache Traffic Server: prefetch plugin can crash on attacker-influenced input

Risk 43
Severity
8.2
First published (updated )
CVE-2026-58183

Apache Traffic ServerApache Traffic Server: ts_lua plugin has initialization and resource-handling errors

Risk 64
Severity
8.2
First published (updated )
CVE-2026-58182

Apache Traffic ServerApache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash

Risk 43
Severity
8.2
First published (updated )
CVE-2026-58181

Apache Traffic ServerApache Traffic Server: txn_box plugin overflows the stack from attacker input

Risk 43
Severity
8.2
First published (updated )
CVE-2026-58180

Apache Traffic ServerApache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery

Risk 43
Severity
8.2
First published (updated )
CVE-2026-58178
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache Traffic ServerApache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

Risk 86
Severity
8.3
First published (updated )
CVE-2026-58177

Apache Traffic ServerApache Traffic Server: HostDB SRV handling leaks memory

Risk 43
Severity
8.2
First published (updated )
CVE-2026-58175

Apache Traffic ServerApache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free

Risk 60
Severity
8.3
First published (updated )
CVE-2026-58164

Apache Traffic ServerApache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server

Risk 66
Severity
8.3
First published (updated )
CVE-2026-58163

Apache Traffic ServerApache Traffic Server: Certifier plugin trusts client SNI when generating certificates

Risk 82
Severity
8.4
First published (updated )
CVE-2026-58162
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache Traffic ServerApache Traffic Server: Listener and ACL handling allow access-control bypass

Risk 54
Severity
7
First published (updated )
CVE-2026-58159

Apache Traffic ServerApache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow

Risk 43
Severity
8.2
First published (updated )
CVE-2026-58158

Apache Traffic ServerApache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustion

Risk 43
Severity
8.2
First published (updated )
CVE-2026-65324

Apache Traffic ServerApache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the server

Risk 47
Severity
8.7
First published (updated )
CVE-2026-58151

Apache Traffic ServerApache Traffic Server: HTTP/2 requests with Transfer-Encoding are not rejected, allowing request smuggling

Risk 73
Severity
7.8
First published (updated )
CVE-2026-58150
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache Traffic ServerApache Traffic Server: Malformed chunked message body allows request smuggling

Risk 82
Severity
7
First published (updated )
CVE-2026-57834

Apache Traffic ServerApache Traffic Server: Buffer overflow via Host field that has a long string value

Risk 43
Severity
8.2
First published (updated )
CVE-2026-33930

Apache Traffic ServerApache Traffic Server: Untrusted @ headers can spoof ATS internal metadata

Risk 73
Severity
7.7
First published (updated )
CVE-2026-33267

Apache Traffic ServerApache Traffic Server: SNI to Host header matching policy is not properly enforced

Risk 61
Severity
7
First published (updated )
CVE-2026-41920

Apache Traffic ServerApache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions

Risk 46
Severity
7.5
Trending
Month
First published (updated )
CVE-2026-59173
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache Traffic ServerApache Traffic Server: Malformed chunked message body allows request smuggling

Risk 45
Severity
7.5
First published (updated )
CVE-2025-65114

Apache Traffic ServerApache Traffic Server: A simple legitimate POST request causes a crash

Risk 45
Severity
7.5
First published (updated )
CVE-2025-58136

Red Hat UndertowUndertow allows `\r\r\r` as a header block terminator. This can be used for request smuggling with p…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2443260

Apache Traffic ServerApache Traffic Server: Malformed chunked message body allows request smuggling

Risk 45
Severity
7.5
First published (updated )
CVE-2024-53868

Apache Traffic ServerApache Traffic Server: Valid Host field value can cause crashes

Risk 45
Severity
7.5
First published (updated )
CVE-2024-50305
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203