Tag

#Apache Traffic Server

newsCRITICAL 10.0

Critical Vulnerability in Apache Traffic Server: CVE-2026-58150

A critical vulnerability (CVE-2026-58150) has been discovered in Apache Traffic Server, which allows for downgrade request smuggling. This issue affects multiple versions of Apache Traffic Server, with a CVSS score of 10. Users are recommended to upgrade to version 9.2.15 or 10.1.4 to fix the issue.

1 source
articleCRITICAL 10.0

Critical Apache Traffic Server Vulnerability: CVE-2026-57834

A critical vulnerability, CVE-2026-57834, with a CVSS score of 10, was discovered in Apache Traffic Server, allowing request smuggling if chunked messages are malformed. This issue affects multiple versions of Apache Traffic Server, and users are recommended to upgrade to version 9.2.15 or 10.1.4 to fix the issue. The vulnerability has not been actively exploited but poses a significant risk due to its severity and potential impact.

1 source