VulnSocial

CVE-2026-111815

LOWCVSS 7.8 · HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed host's verify_client STRICT policy. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0. Users are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issue.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-295

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse2 posts
  • ExploitGrid@exploitgrid

    [CVE] CVE-2026-111815 [HIGH PRIORITY] CVSS: 10 | Vendor: #ApacheSoftwareFoundation #Apache Traffic Server: TLS session ticket resumption bypasses per-SNI verify_... 🔗 https://exploitgrid.net/cve/CVE-2026-111815

    1000025
    416 followersView on X
  • ExploitGrid@exploitgrid

    ExploitGrid Daily Digest 🚨 Top CVEs: CVE-2026-105944 (CVSS: 10) Apache Softw... CVE-2026-111812 (CVSS: 10) Apache Softw... CVE-2026-111813 (CVSS: 10) Apache Softw... CVE-2026-111814 (CVSS: 10) Apache Softw... CVE-2026-111815 (CVSS: 10) Apache Softw... ..🧵👇

    1000056
    416 followersView on X

Explore more

Back to dashboard