Apache traffic server
This hub aggregates every CVE we track for Apache traffic server, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
95
CVEs tracked
10
Critical
66
High
0
In CISA KEV
Severity distribution
HIGH66MEDIUM18CRITICAL10LOW1
Monthly trend
0
0
3
0
0
0
4
1
0
2
0
0
0
0
0
0
0
0
0
2
0
0
39
0
2024-092026-08
Latest CVEs
The 15 most recently published vulnerabilities affecting Apache traffic server.
- CVE-2026-65100Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode4.8
- CVE-2026-58189Apache Traffic Server: Plugins resetting the redirect counter enable SSRF amplification7.5
- CVE-2026-58188Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins8.2
- CVE-2026-58187Apache Traffic Server: Multiplexer plugin chunk decoder enables a denial of service3.7
- CVE-2026-58186Apache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responses7.5
- CVE-2026-58185Apache Traffic Server: Use-after-free in the intercept plugin5.9
- CVE-2026-58184Apache Traffic Server: header_rewrite plugin cookie handling can corrupt memory8.2
- CVE-2026-58183Apache Traffic Server: prefetch plugin can crash on attacker-influenced input5.9
- CVE-2026-58182Apache Traffic Server: ts_lua plugin has initialization and resource-handling errors8.6
- CVE-2026-58181Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash7.5
- CVE-2026-58180Apache Traffic Server: txn_box plugin overflows the stack from attacker input7.5
- CVE-2026-58179Apache Traffic Server: regex_remap plugin overflows the stack from attacker input8.1
- CVE-2026-58178Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery7.5
- CVE-2026-58177Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework8.1
- CVE-2026-58175Apache Traffic Server: HostDB SRV handling leaks memory7.5
Product normalization is registry-driven with AI assist and human review. How it works