CVE-2026-41920

A critical improper access control vulnerability in Apache Traffic Server versions 9.0.0 to 9.1.14 and 10.0.0 to 10.1.3 allows unauthorized access to sensitive resources, potentially leading to data exposure or manipulation. Organizations using affected versions should prioritize upgrading to versions 9.1.15 or 10.1.4 to mitigate the risk of exploitation. Immediate action is essential for those managing web traffic and content delivery to protect their systems and data integrity.