SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-58161

HIGH · CVSS 7.5 EPSS 0.44%

Source: NVD + CISA KEV + EPSS · Published 2026-07-29 · Last synced 2026-08-28

CyberRota Analysis

AI-Generated

Apache Traffic Server versions 8.0.0 to 8.1.9, 9.0.0 to 9.2.14, and 10.0.0 to 10.1.3 are vulnerable to crashes caused by null dereferences and dangling references in TLS and SNI handling. This vulnerability can lead to service disruptions, making it critical for users running affected versions to upgrade to 9.2.15 or 10.1.4 immediately. Organizations relying on Apache Traffic Server for their operations should prioritize this update to maintain service stability and security.

CVE
CVE-2026-58161
Severity
HIGH
CVSS
7.5
EPSS
0.44%
Apache

Original NVD Description

Apache Traffic Server can crash from null dereferences and dangling references in TLS and SNI handling. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)