CyberRota Analysis
AI-GeneratedApache Traffic Server versions 8.0.0 through 10.1.3 are vulnerable to a denial-of-service attack caused by abusive HTTP/2 framing and flow-control, potentially leading to crashes or resource exhaustion. Organizations utilizing these versions should prioritize upgrading to 9.2.15 or 10.1.4 to mitigate this high-severity vulnerability and maintain service availability.
CVE
CVE-2026-58151
Severity
HIGH
CVSS
7.5
EPSS
0.52%
Apache
Original NVD Description
Apache Traffic Server can be crashed or driven to resource exhaustion by abusive HTTP/2 framing and flow-control. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)