CyberSectr
← CVE Veritabanı

CVE-2026-111815

Kritik

Teknik Veri (Otomatik)

CVSS Skoru
10
EPSS
—
CWE
CWE-295
KEV Durumu
Hayır

Yayım tarihi: 21 Ekim 2026

Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed host's verify_client STRICT policy. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0. Users are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issue.

Referanslar

NVD kaydı ↗CVE.org ↗

Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.