CVE-2026-58184highCWE-787

CVE-2026-58184: falha de alta gravidade em Apache Traffic Server

Apache Traffic Server: header_rewrite plugin cookie handling can corrupt memory

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Apache Traffic Server+ Monitorar trafficserver

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.3epss 0.6%
The Apache Traffic Server header_rewrite plugin can crash or corrupt memory during cookie operations and CIDR condition matching. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Apache Software Foundation · Apache Traffic Server
CVEs relacionadas — Apache Traffic Server

No mesmo produto, das mais perigosas para as menos.

CVE-2024-31309HIGHApache Traffic Server: HTTP/2 CONTINUATION frames can be utilized for DoS attackEPSS 92.5%CVE-2023-39456HIGHApache Traffic Server: Malformed http/2 frames can cause an abortEPSS 58.3%CVE-2018-1318—CVE-2018-1318EPSS 7.6%CVE-2018-8022—CVE-2018-8022EPSS 7.4%CVE-2018-8040—CVE-2018-8040EPSS 7.2%CVE-2018-8005—CVE-2018-8005EPSS 6.8%