Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of service. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-58187 Buffer Overflow in Apache Traffic Server Multiplexer Plugin Enables Denial of Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-58187
Post summary
CVE‑2026‑58187 is a newly disclosed buffer overflow vulnerability in Apache Traffic Server’s multiplexer plugin that could lead to denial of service.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | traffic_server | - | - | - |