SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-58163

HIGH · CVSS 7.5 EPSS 0.38%

Source: NVD + CISA KEV + EPSS · Published 2026-07-29 · Last synced 2026-08-28

CyberRota Analysis

AI-Generated

Apache Traffic Server versions 8.0.0 to 8.1.9, 9.0.0 to 9.2.14, and 10.0.0 to 10.1.3 are vulnerable due to improper handling of on-disk cache fields, which can lead to state corruption or crashes. Organizations using these versions should prioritize upgrading to 9.2.15 or 10.1.4 to mitigate potential disruptions and maintain system integrity. This vulnerability poses a high risk, particularly for environments relying heavily on Apache Traffic Server for caching and content delivery.

CVE
CVE-2026-58163
Severity
HIGH
CVSS
7.5
EPSS
0.38%
Apache

Original NVD Description

Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corrupting state or crashing. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)