SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-58182

HIGH · CVSS 8.6 EPSS 0.42%

Source: NVD + CISA KEV + EPSS · Published 2026-07-29 · Last synced 2026-08-28

CyberRota Analysis

AI-Generated

The Apache Traffic Server's ts_lua plugin is vulnerable due to improper handling of initialization, transform context, and per-instance state, affecting versions 8.0.0 to 8.1.9, 9.0.0 to 9.2.14, and 10.0.0 to 10.1.3. This vulnerability could lead to potential exploitation, impacting the integrity and availability of services. Organizations using affected versions should prioritize upgrading to 9.2.15 or 10.1.4 to mitigate risks.

CVE
CVE-2026-58182
Severity
HIGH
CVSS
8.6
EPSS
0.42%
Apache

Original NVD Description

The Apache Traffic Server ts_lua plugin mishandles initialization, transform context, and per-instance state. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)