SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-58164

HIGH · CVSS 7.5 EPSS 0.39%

Source: NVD + CISA KEV + EPSS · Published 2026-07-29 · Last synced 2026-08-28

CyberRota Analysis

AI-Generated

Apache Traffic Server versions 8.0.0 to 8.1.9, 9.0.0 to 9.2.14, and 10.0.0 to 10.1.3 are vulnerable due to use-after-free and time-of-check/time-of-use errors in remap configuration handling. Exploitation of these vulnerabilities could lead to potential denial of service or arbitrary code execution, posing a significant risk to affected systems. Organizations using these versions should prioritize upgrading to 9.2.15 or 10.1.4 to mitigate the risks associated with this high-severity vulnerability.

CVE
CVE-2026-58164
Severity
HIGH
CVSS
7.5
EPSS
0.39%
Apache

Original NVD Description

Apache Traffic Server has use-after-free and time-of-check/time-of-use errors in remap configuration handling. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)