VulnSocial

CVE-2026-111814

LOWCVSS 7.8 · HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one client certificate for a transaction configured to present a different one. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0. Users are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issue.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-295

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post
  • ExploitGrid@exploitgrid

    ExploitGrid Daily Digest 🚨 Top CVEs: CVE-2026-105944 (CVSS: 10) Apache Softw... CVE-2026-111812 (CVSS: 10) Apache Softw... CVE-2026-111813 (CVSS: 10) Apache Softw... CVE-2026-111814 (CVSS: 10) Apache Softw... CVE-2026-111815 (CVSS: 10) Apache Softw... ..🧵👇

    1000056
    416 followersView on X

Explore more

Back to dashboard