Known Vulnerabilities for Apache Traffic Server by Apache Software Foundation
Listed below are 3 of the newest known vulnerabilities associated with "Apache Traffic Server" by "Apache Software Foundation".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-28367 | A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminat... | Not Provided | 2026-03-27 | 2026-04-01 |
| CVE-2025-65114 | Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server... | Not Provided | 2026-04-02 | 2026-04-02 |
| CVE-2025-58136 | A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from 10.0... | Not Provided | 2026-04-02 | 2026-04-02 |