Advisories · Technology

Apache Software Foundation Apache Traffic Server.

Every CVE that names Apache Software Foundation Apache Traffic Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112381 CVE record

CVSS 8.2 High

Apache Traffic Server: Nullptr dereference in net_write_io on a POST half-close with chunked response
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 21 Oct 2026
CVE-2026-111817 CVE record

CVSS 6.9 Medium

Apache Traffic Server: Dropping chunked trailers stalls a passthrough transfer until timeout
- Apache Software Foundation Apache Traffic Server
- Denial of service
Not analysed yet 21 Oct 2026
CVE-2026-111812 CVE record

CVSS 7.0 High

Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials
- Apache Software Foundation Apache Traffic Server
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-111811 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication
- Apache Software Foundation Apache Traffic Server
- Authentication bypass
Not analysed yet 21 Oct 2026
CVE-2026-111809 CVE record

CVSS 6.9 Medium

Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smuggling
- Apache Software Foundation Apache Traffic Server
- HTTP request smuggling
Not analysed yet 21 Oct 2026
CVE-2026-111810 CVE record

CVSS 8.7 High

Apache Traffic Server: Unthrottled per-header diagnostic logging enables a log-flood denial of service
- Apache Software Foundation Apache Traffic Server
- Denial of service
Not analysed yet 21 Oct 2026
CVE-2026-111815 CVE record

CVSS 7.8 High

Apache Traffic Server: TLS session ticket resumption bypasses per-SNI verify_client STRICT enforcement
- Apache Software Foundation Apache Traffic Server
- Weak cryptography or TLS
Not analysed yet 21 Oct 2026
CVE-2026-111814 CVE record

CVSS 7.8 High

Apache Traffic Server: Default server_session_sharing.match omits MASK_CERT, allowing pooled mTLS identity confusion at the origin
- Apache Software Foundation Apache Traffic Server
- Weak cryptography or TLS
Not analysed yet 21 Oct 2026
CVE-2026-111808 CVE record

CVSS 7.7 High

Apache Traffic Server: HTTP/2 DATA frame padding underflow lets a client trigger backend worker-pool exhaustion
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 21 Oct 2026
CVE-2026-111805 CVE record

CVSS 7.7 High

Apache Traffic Server: HTTP/2 Content-Length truncation lets a client trigger backend worker-pool exhaustion
- Apache Software Foundation Apache Traffic Server
- Denial of service
Not analysed yet 21 Oct 2026
CVE-2026-111816 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-out
- Apache Software Foundation Apache Traffic Server
- HTTP request smuggling
Not analysed yet 21 Oct 2026
CVE-2025-55702 CVE record

CVSS 7.0 High

Apache Traffic Server: An unread Expect: 100-continue request body is framed as a new request
- Apache Software Foundation Apache Traffic Server
- HTTP request smuggling
Not analysed yet 21 Oct 2026
CVE-2025-31699 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smuggling
- Apache Software Foundation Apache Traffic Server
- HTTP request smuggling
Not analysed yet 21 Oct 2026
CVE-2026-111804 CVE record

CVSS 8.8 High

Apache Traffic Server: wasm plugin has a use-after-free and forwards unvalidated guest metric IDs
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 21 Oct 2026
CVE-2026-111813 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration
- Apache Software Foundation Apache Traffic Server
- Command injection
Not analysed yet 21 Oct 2026
CVE-2026-102795 CVE record

CVSS 7.0 High

Apache Traffic Server: SNI to Host header matching policy is not properly enforced
- Apache Software Foundation Apache Traffic Server
- Broken access control
Not analysed yet 2 Oct 2026
CVE-2026-65100 CVE record

CVSS 6.3 Medium

Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode
- Apache Software Foundation Apache Traffic Server
- CWE-696
Not analysed yet 29 Jul 2026
CVE-2026-58189 CVE record

CVSS 8.2 High

Apache Traffic Server: Plugins resetting the redirect counter enable SSRF amplification
- Apache Software Foundation Apache Traffic Server
- Server-side request forgery (SSRF)
Not analysed yet 29 Jul 2026
CVE-2026-58188 CVE record

CVSS 8.4 High

Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-58187 CVE record

CVSS 6.3 Medium

Apache Traffic Server: Multiplexer plugin chunk decoder enables a denial of service
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-58186 CVE record

CVSS 8.2 High

Apache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responses
- Apache Software Foundation Apache Traffic Server
- CWE-20
Not analysed yet 29 Jul 2026
CVE-2026-58185 CVE record

CVSS 8.2 High

Apache Traffic Server: Use-after-free in the intercept plugin
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-58184 CVE record

CVSS 8.3 High

Apache Traffic Server: header_rewrite plugin cookie handling can corrupt memory
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-58183 CVE record

CVSS 8.2 High

Apache Traffic Server: prefetch plugin can crash on attacker-influenced input
- Apache Software Foundation Apache Traffic Server
- CWE-20
Not analysed yet 29 Jul 2026
CVE-2026-58182 CVE record

CVSS 8.2 High

Apache Traffic Server: ts_lua plugin has initialization and resource-handling errors
- Apache Software Foundation Apache Traffic Server
- Denial of service
Not analysed yet 29 Jul 2026
CVE-2026-58181 CVE record

CVSS 8.2 High

Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-58180 CVE record

CVSS 8.2 High

Apache Traffic Server: txn_box plugin overflows the stack from attacker input
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-58179 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Apache Traffic Server: regex_remap plugin overflows the stack from attacker input
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-58178 CVE record

CVSS 8.2 High

Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery
- Apache Software Foundation Apache Traffic Server
- Denial of service
Not analysed yet 29 Jul 2026
CVE-2026-58177 CVE record

CVSS 8.3 High

Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-58175 CVE record

CVSS 8.2 High

Apache Traffic Server: HostDB SRV handling leaks memory
- Apache Software Foundation Apache Traffic Server
- Denial of service
Not analysed yet 29 Jul 2026
CVE-2026-58164 CVE record

CVSS 8.3 High

Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-58163 CVE record

CVSS 8.3 High

Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server
- Apache Software Foundation Apache Traffic Server
- Insecure deserialization
Not analysed yet 29 Jul 2026
CVE-2026-58162 CVE record

CVSS 8.4 High

Apache Traffic Server: Certifier plugin trusts client SNI when generating certificates
- Apache Software Foundation Apache Traffic Server
- Weak cryptography or TLS
Not analysed yet 29 Jul 2026
CVE-2026-58161 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Apache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the server
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-58160 CVE record

CVSS 6.3 Medium

Apache Traffic Server: Out-of-bounds reads while parsing DNS responses
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-58159 CVE record

CVSS 7.0 High

Apache Traffic Server: Listener and ACL handling allow access-control bypass
- Apache Software Foundation Apache Traffic Server
- Broken access control
Not analysed yet 29 Jul 2026
CVE-2026-58158 CVE record

CVSS 8.2 High

Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-58157 CVE record

CVSS 6.9 Medium

Apache Traffic Server: Improper server-session reuse can expose data across client connections
- Apache Software Foundation Apache Traffic Server
- Information disclosure
Not analysed yet 29 Jul 2026
CVE-2026-58156 CVE record

CVSS 6.3 Medium

Apache Traffic Server: URL and port parsing errors allow access-control bypass
- Apache Software Foundation Apache Traffic Server
- Broken access control
Not analysed yet 29 Jul 2026
CVE-2026-58155 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Apache Traffic Server: Header-name length truncation enables header aliasing and request smuggling
- Apache Software Foundation Apache Traffic Server
- HTTP request smuggling
Not analysed yet 29 Jul 2026
CVE-2026-58154 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Apache Traffic Server: Memory-safety errors in MIME and header parsing
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-65325 CVE record

CVSS 6.3 Medium

Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification
- Apache Software Foundation Apache Traffic Server
- Weak cryptography or TLS
Not analysed yet 29 Jul 2026
CVE-2026-65324 CVE record

CVSS 8.2 High

Apache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustion
- Apache Software Foundation Apache Traffic Server
- Denial of service
Not analysed yet 29 Jul 2026
CVE-2026-58153 CVE record

CVSS 6.3 Medium

Apache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafely
- Apache Software Foundation Apache Traffic Server
- HTTP request smuggling
Not analysed yet 29 Jul 2026
CVE-2026-58152 CVE record

CVSS 6.9 Medium

Apache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memory
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-58151 CVE record

CVSS 8.7 High

Apache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the server
- Apache Software Foundation Apache Traffic Server
- Denial of service
Not analysed yet 29 Jul 2026
CVE-2026-58150 CVE record

CVSS 7.8 High

Apache Traffic Server: HTTP/2 requests with Transfer-Encoding are not rejected, allowing request smuggling
- Apache Software Foundation Apache Traffic Server
- HTTP request smuggling
Not analysed yet 29 Jul 2026
CVE-2026-57834 CVE record

CVSS 7.0 High

Apache Traffic Server: Malformed chunked message body allows request smuggling
- Apache Software Foundation Apache Traffic Server
- HTTP request smuggling
Not analysed yet 29 Jul 2026
CVE-2026-33930 CVE record

CVSS 8.2 High

Apache Traffic Server: Buffer overflow via Host field that has a long string value
- Apache Software Foundation Apache Traffic Server
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-24033 CVE record

CVSS 6.9 Medium

Apache Traffic Server: Request smuggling via chunked extension quoted-string parsing
- Apache Software Foundation Apache Traffic Server
- HTTP request smuggling
Not analysed yet 29 Jul 2026
CVE-2026-33267 CVE record

CVSS 7.7 High

Apache Traffic Server: Untrusted @ headers can spoof ATS internal metadata
- Apache Software Foundation Apache Traffic Server
- CWE-20
Not analysed yet 29 Jul 2026
CVE-2026-22068 CVE record

CVSS 6.9 Medium

Apache Traffic Server: Regex mappings match with malicious domain names
- Apache Software Foundation Apache Traffic Server
- CWE-777
Not analysed yet 29 Jul 2026
CVE-2026-41920 CVE record

CVSS 7.0 High

Apache Traffic Server: SNI to Host header matching policy is not properly enforced
- Apache Software Foundation Apache Traffic Server
- Broken access control
Not analysed yet 29 Jul 2026
CVE-2026-59173 CVE record

CVSS 7.5 High

Apache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions
- Apache Software Foundation Apache Traffic Server
- Denial of service
Not analysed yet 18 Jul 2026
CVE-2025-65114 CVE record

CVSS 7.5 High

Apache Traffic Server: Malformed chunked message body allows request smuggling
- Apache Software Foundation Apache Traffic Server
- HTTP request smuggling
Not analysed yet 2 Apr 2026
CVE-2025-58136 CVE record

CVSS 7.5 High

Apache Traffic Server: A simple legitimate POST request causes a crash
- Apache Software Foundation Apache Traffic Server
- CWE-670
Not analysed yet 2 Apr 2026
CVE-2025-31698 CVE record

CVSS 7.5 High

Apache Traffic Server: Client IP address from PROXY protocol is not used for ACL
- Apache Software Foundation Apache Traffic Server
- Broken access control
Not analysed yet 19 Jun 2025
CVE-2025-49763 CVE record

CVSS 7.5 High

Apache Traffic Server: Remote DoS via memory exhaustion in ESI Plugin
- Apache Software Foundation Apache Traffic Server
- Denial of service
Not analysed yet 19 Jun 2025
CVE-2024-53868 CVE record

CVSS 7.5 High

Apache Traffic Server: Malformed chunked message body allows request smuggling
- Apache Software Foundation Apache Traffic Server
- HTTP request smuggling
Not analysed yet 3 Apr 2025