Apache Traffic Server <10.1.4

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

5critical3high2medium0low

updated 2026-10-22

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-33267US	critical9.1	0.60% (48th)	Exploit	no fix	2026-07-29	—
CVE-2026-58188US	—	0.77% (55th)	—	no fix	2026-07-29	—
CVE-2026-58182US	—	0.73% (54th)	—	no fix	2026-07-29	—
CVE-2026-58186US	—	0.70% (53rd)	—	no fix	2026-07-29	—
CVE-2026-58163US	critical9.1	0.70% (53rd)	—	no fix	2026-07-29	—
CVE-2026-58181US	—	0.66% (51st)	—	no fix	2026-07-29	—
CVE-2026-58180US	—	0.66% (51st)	—	no fix	2026-07-29	—
CVE-2026-58178US	—	0.66% (51st)	—	no fix	2026-07-29	—
CVE-2026-58175US	—	0.66% (51st)	—	no fix	2026-07-29	—
CVE-2026-58164US	—	0.66% (51st)	—	no fix	2026-07-29	—
CVE-2026-58161US	—	0.66% (51st)	—	no fix	2026-07-29	—
CVE-2026-65324US	—	0.66% (51st)	—	no fix	2026-07-29	—
CVE-2026-58151US	—	0.66% (51st)	—	no fix	2026-07-29	—
CVE-2026-58183US	high7.5	0.66% (51st)	—	no fix	2026-07-29	—
CVE-2026-58153US	—	0.64% (50th)	—	no fix	2026-07-29	—
CVE-2026-58189US	—	0.63% (49th)	—	no fix	2026-07-29	—
CVE-2026-57834US	—	0.61% (48th)	—	no fix	2026-07-29	—
CVE-2026-22068US	medium5.3	0.61% (48th)	—	no fix	2026-07-29	—
CVE-2026-58179US	critical9.8	0.60% (48th)	—	no fix	2026-07-29	—
CVE-2026-58184US	high7.5	0.59% (47th)	—	no fix	2026-07-29	—
CVE-2026-58177US	critical9.8	0.59% (47th)	—	no fix	2026-07-29	—
CVE-2026-58187US	high7.5	0.58% (47th)	—	no fix	2026-07-29	—
CVE-2026-58158US	—	0.58% (47th)	—	no fix	2026-07-29	—
CVE-2026-58152US	—	0.58% (47th)	—	no fix	2026-07-29	—
CVE-2026-33930US	—	0.58% (47th)	—	no fix	2026-07-29	—
CVE-2026-65100US	—	0.58% (47th)	—	no fix	2026-07-29	—
CVE-2026-58185US	critical9.8	0.58% (47th)	—	no fix	2026-07-29	—
CVE-2026-58160US	—	0.58% (47th)	—	no fix	2026-07-29	—
CVE-2026-24033US	medium5.3	0.57% (46th)	—	no fix	2026-07-29	—
CVE-2026-58150US	—	0.57% (46th)	—	no fix	2026-07-29	—
CVE-2026-58159US	—	0.56% (46th)	—	no fix	2026-07-29	—
CVE-2026-58155US	—	0.54% (44th)	—	no fix	2026-07-29	—
CVE-2026-58154US	—	0.54% (44th)	—	no fix	2026-07-29	—
CVE-2026-41920US	—	0.53% (44th)	—	no fix	2026-07-29	—
CVE-2026-58157US	—	0.48% (41st)	—	no fix	2026-07-29	—
CVE-2026-58156US	—	0.39% (32nd)	—	no fix	2026-07-29	—
CVE-2026-58162US	—	0.36% (28th)	—	no fix	2026-07-29	—
CVE-2026-102795US	—	0.28% (20th)	—	no fix	2026-10-02	—
CVE-2026-65325US	—	0.28% (20th)	—	no fix	2026-07-29	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-121Stack-based Buffer Overflow5 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')5 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-284Improper Access Control2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-416Use After Free2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan