CVE-2026-58156

Apache Traffic Server versions 8.0.0 to 8.1.9, 9.0.0 to 9.2.14, and 10.0.0 to 10.1.3 are vulnerable due to improper parsing of ports in URLs and userinfo, which can lead to unauthorized access through port-based access control bypass. Organizations using these affected versions should prioritize upgrading to versions 9.2.15 or 10.1.4 to mitigate potential security risks. This vulnerability is particularly relevant for environments relying on Apache Traffic Server for traffic management and access control.