Known Vulnerabilities for Traffic Server by Apache
Listed below are 10 of the newest known vulnerabilities associated with "Traffic Server" by "Apache".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-76362 json | In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOAR and... | Not Provided | 2026-08-19 | 2026-08-21 |
| CVE-2026-73253 json | Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildcard ce... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-73251 json | Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a M... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-71290 json | Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BU... | Not Provided | 2026-08-11 | 2026-08-13 |
| CVE-2026-70616 json | boringproxy through 0.10.0 contains a resource exhaustion vulnerability that allows any authenticated user to permanently exh... | Not Provided | 2026-08-05 | 2026-08-06 |
| CVE-2026-65981 json | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates... | Not Provided | 2026-07-31 | 2026-08-05 |
| CVE-2026-65655 json | When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Tempo... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-65325 json | Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new re... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-65324 json | Apache Traffic Server drops the per-stream buffer cap when dechunking HTTP/2 or HTTP/3 responses, letting a slow client exhau... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-65100 json | Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an e... | Not Provided | 2026-07-29 | 2026-07-29 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Apache | Traffic Server | 9.0.0 | |||
| Application | Apache | Traffic Server | 9.0.0 | |||
| Application | Apache | Traffic Server | 9.0.0 | |||
| Application | Apache | Traffic Server | 8.1.1 | |||
| Application | Apache | Traffic Server | 8.1.1 | |||
| Application | Apache | Traffic Server | 8.1.0 | |||
| Application | Apache | Traffic Server | 8.1.0 | |||
| Application | Apache | Traffic Server | 8.0.8 | |||
| Application | Apache | Traffic Server | 8.0.8 | |||
| Application | Apache | Traffic Server | 8.0.7 | |||
| Application | Apache | Traffic Server | 8.0.7 | |||
| Application | Apache | Traffic Server | 8.0.7 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.6 | |||
| Application | Apache | Traffic Server | 8.0.5 | |||
| Application | Apache | Traffic Server | 8.0.4 | |||
| Application | Apache | Traffic Server | 8.0.4 | |||
| Application | Apache | Traffic Server | 8.0.4 |