SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-58157

HIGH · CVSS 8.7 EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published 2026-07-29 · Last synced 2026-08-28

CyberRota Analysis

AI-Generated

Apache Traffic Server versions 8.0.0 to 8.1.9, 9.0.0 to 9.2.14, and 10.0.0 to 10.1.3 are vulnerable to improper session and tunnel reuse, potentially exposing sensitive data across client connections. This high-severity vulnerability (CVSS 8.7) could lead to significant data leakage, making it critical for organizations using affected versions to prioritize upgrading to versions 9.2.15 or 10.1.4 to mitigate the risk.

CVE
CVE-2026-58157
Severity
HIGH
CVSS
8.7
EPSS
0.27%
Apache

Original NVD Description

Apache Traffic Server can reuse server sessions and tunnels improperly, exposing data across client connections. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)