Known Vulnerabilities for Traffic Server by Apache
Listed below are 10 of the newest known vulnerabilities associated with "Traffic Server" by "Apache".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114477 json | Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote authent... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-113812 json | Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised interme... | Not Provided | 2026-10-20 | 2026-10-21 |
| CVE-2026-109423 json | NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validati... | Not Provided | 2026-10-12 | 2026-10-15 |
| CVE-2026-107938 json | In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname i... | Not Provided | 2026-10-09 | 2026-10-15 |
| CVE-2026-107315 json | pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length wit... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-105294 json | Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write ... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105223 json | maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigF... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105105 json | CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) in NAS... | Not Provided | 2026-10-03 | 2026-10-05 |
| CVE-2026-104712 json | Asymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bound to an arbit... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-102795 json | Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 throu... | Not Provided | 2026-10-02 | 2026-10-02 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Apache | Traffic Server | 9.0.0 | |||
| Application | Apache | Traffic Server | 9.0.0 | |||
| Application | Apache | Traffic Server | 9.0.0 | |||
| Application | Apache | Traffic Server | 8.1.1 | |||
| Application | Apache | Traffic Server | 8.1.1 | |||
| Application | Apache | Traffic Server | 8.1.0 | |||
| Application | Apache | Traffic Server | 8.1.0 | |||
| Application | Apache | Traffic Server | 8.0.8 | |||
| Application | Apache | Traffic Server | 8.0.8 | |||
| Application | Apache | Traffic Server | 8.0.7 | |||
| Application | Apache | Traffic Server | 8.0.7 | |||
| Application | Apache | Traffic Server | 8.0.7 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.5 | |||
| Application | Apache | Traffic Server | 8.0.4 | |||
| Application | Apache | Traffic Server | 8.0.4 | |||
| Application | Apache | Traffic Server | 8.0.4 |