CVE-2026-58150

Kritik

Teknik Veri (Otomatik)

CVSS Skoru: 10
EPSS: 0.6%
CWE: CWE-444
KEV Durumu: Hayır

Yayım tarihi: 29 Temmuz 2026

Etkilenen: apache traffic_server

Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade request smuggling. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

Referanslar

https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d

NVD kaydı ↗CVE.org ↗

Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.