SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-58160

MEDIUM · CVSS 6.5 EPSS 0.42%

Source: NVD + CISA KEV + EPSS · Published 2026-07-29 · Last synced 2026-08-28

CyberRota Analysis

AI-Generated

Apache Traffic Server versions 8.0.0 to 8.1.9, 9.0.0 to 9.2.14, and 10.0.0 to 10.1.3 are vulnerable to an out-of-bounds read when parsing DNS answers, potentially leading to information disclosure. Organizations utilizing affected versions should prioritize upgrading to versions 9.2.15 or 10.1.4 to mitigate this risk. This vulnerability is particularly relevant for users managing DNS services or relying on Apache Traffic Server for network traffic management.

CVE
CVE-2026-58160
Severity
MEDIUM
CVSS
6.5
EPSS
0.42%
Apache

Original NVD Description

Apache Traffic Server reads out of bounds while parsing DNS answers. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)