VulnSocial

CVE-2026-58179Disclosure(apache / traffic_server)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch apache traffic_server systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

apache CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • traffic_server

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 2d ago at 1 mentions (2026-07-29); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
apache
Products
traffic_server

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-07-29: 1Mentions · 2026-08-01: 1Mentions · 2026-08-03: 1Patch / Workaround · 2026-08-01: 1Technical Details · 2026-07-29: 1Technical Details · 2026-08-01: 1Technical Details · 2026-08-03: 107-2908-0108-03
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-291
Disclosure1
2026-08-011
Patch1
2026-08-031
Disclosure1
Full discourse3 posts
  • ゆぅさん@YY20424277
    Disclosure

    【3軸解説】「Apache Software FoundationのApache Traffic Serverにおけるスタックベースのバッファオーバーフローの脆弱性（CVE-2026-58179）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキ… ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis

    Post summary

    The post delivers a three‑axis analysis of the stack‑based buffer overflow flaw CVE‑2026‑58179 in Apache Traffic Server, offering technical context but no evidence of exploitation, patching, or PoC details.

    0001076
    844 followersView on X
  • takenaka hiroya@Joe_Biden_ja
    Patch

    Apache Traffic Server の regex_remap にスタックオーバーフロー。CVSS 9.8、未認証で成立します。修正版は 9.2.15 と 10.1.4。8系は NVD に修正版が示されていないので、9系以降への移行を計画するのが現実的です。remap.… https://cve.autoarticles.net/cve/CVE-2026-58179

    Post summary

    Announces a stack‑overflow vulnerability (CVSS 9.8) in Apache Traffic Server’s regex_remap, cites patched 9.2.15/10.1.4, and recommends upgrading past the 8.x series.

    0000062
    561 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-58179 Stack and Integer Overflow in Apache Traffic Server regex_remap Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-58179

    Post summary

    This text announces a stack and integer overflow vulnerability (CVE-2026-58179) in Apache Traffic Server's regex_remap plugin, providing technical details but no evidence of exploitation, PoC, or patch.

    0000091
    4.1K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appapachetraffic_server---

Explore more

Back to dashboardapache CVEstraffic_server vulnerabilities