Known Vulnerabilities for Traffic Server by Apache
Listed below are 10 of the newest known vulnerabilities associated with "Traffic Server" by "Apache".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-107938 json | In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname i... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-107315 json | pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length wit... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-105294 json | Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write ... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105223 json | maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigF... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105105 json | CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) in NAS... | Not Provided | 2026-10-03 | 2026-10-05 |
| CVE-2026-104712 json | Asymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bound to an arbit... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-102795 json | Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 throu... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-102508 json | Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X (PL... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-100708 json | Froxlor before 2.3.13 returns the ssl_key_file column — which stores the raw PEM TLS private-key content — verbatim in th... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-97716 json | CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauth... | Not Provided | 2026-10-07 | 2026-10-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Apache | Traffic Server | 9.0.0 | |||
| Application | Apache | Traffic Server | 9.0.0 | |||
| Application | Apache | Traffic Server | 9.0.0 | |||
| Application | Apache | Traffic Server | 8.1.1 | |||
| Application | Apache | Traffic Server | 8.1.1 | |||
| Application | Apache | Traffic Server | 8.1.0 | |||
| Application | Apache | Traffic Server | 8.1.0 | |||
| Application | Apache | Traffic Server | 8.0.8 | |||
| Application | Apache | Traffic Server | 8.0.8 | |||
| Application | Apache | Traffic Server | 8.0.7 | |||
| Application | Apache | Traffic Server | 8.0.7 | |||
| Application | Apache | Traffic Server | 8.0.7 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.5 | |||
| Application | Apache | Traffic Server | 8.0.4 | |||
| Application | Apache | Traffic Server | 8.0.4 | |||
| Application | Apache | Traffic Server | 8.0.4 |