SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-58154

HIGH · CVSS 8.9 EPSS 0.40%

Source: NVD + CISA KEV + EPSS · Published 2026-07-29 · Last synced 2026-08-28

CyberRota Analysis

AI-Generated

Apache Traffic Server versions 8.0.0 to 8.1.9, 9.0.0 to 9.2.14, and 10.0.0 to 10.1.3 are vulnerable to out-of-bounds writes and integer overflows when parsing MIME and HTTP headers, potentially leading to arbitrary code execution or service disruption. Organizations utilizing these versions should prioritize upgrading to 9.2.15 or 10.1.4 to mitigate the risk associated with this high-severity vulnerability. Immediate action is recommended for all users to protect their systems from potential exploitation.

CVE
CVE-2026-58154
Severity
HIGH
CVSS
8.9
EPSS
0.40%
Apache

Original NVD Description

Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP headers. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)