← Database

CVE-2026-58180

HIGH CVSS: 7.5 Published: 2026-07-29 Modified: 2026-07-31

Description

The Apache Traffic Server txn_box plugin overflows the stack from attacker-controlled input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

Affected Platforms

Apache Traffic Server

Weakness Type

CWE-121

References