CVE-2026-58188

Several experimental plugins in Apache Traffic Server versions 8.0.0 to 8.1.9, 9.0.0 to 9.2.14, and 10.0.0 to 10.1.3 contain memory-safety and limit-bypass vulnerabilities that could be exploited to compromise system integrity. Organizations utilizing these affected versions should prioritize upgrading to versions 9.2.15 or 10.1.4 to mitigate potential security risks. This is particularly critical for environments relying on Apache Traffic Server for handling sensitive data or high-traffic applications.