CVE-2026-58155

Kritik

Teknik Veri (Otomatik)

CVSS Skoru: 9.3
EPSS: 0.5%
CWE: CWE-444
KEV Durumu: Hayır

Yayım tarihi: 29 Temmuz 2026

Etkilenen: apache traffic_server

Apache Traffic Server truncates over-long header names, allowing header aliasing, request smuggling, and policy bypass. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

Referanslar

https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d

NVD kaydı ↗CVE.org ↗

Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.