1932 matches found
CVE-2026-33267-PoC
CVE-2026-33267 — Apache Traffic Server untrusted @ header → internal metadata spoof CVSS 10.0 Critical · CWE-20 · GHSA-jrh6-9hgv-mqm7 Summary Apache Traffic Server reserves @-prefixed headers @Ats-Internal, @ICAP-Status, @TCPInfo, ... for internal metadata : they live in the in-memory header...
CVE-2026-111805
Apache Traffic Server can be used to exhaust an HTTP/1.1 origins work...
UBUNTU-CVE-2026-111815
Apache Traffic Server can resume a TLS session across SNI virtual host...
CVE-2026-111809
Apache Traffic Server allows request smuggling via HEAD requests that...
UBUNTU-CVE-2026-111810
Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled...
UBUNTU-CVE-2026-112381
Apache Traffic Server can crash with a null pointer dereference when a...
CVE-2026-111817
Apache Traffic Server can stall a chunked transfer that it passes thro...
CVE-2026-111811
Apache Traffic Servers experimental tsmemcache plugin allows unauthen...
CVE-2026-111815
Apache Traffic Server can resume a TLS session across SNI virtual host...
CVE-2026-111813
Apache Traffic Servers experimental magick plugin lets an unauthentic...
CVE-2026-111808
Apache Traffic Server can be used to exhaust an HTTP/1.1 origins work...
CVE-2026-111812
Apache Traffic Servers originserverauth plugin lets a client force...
CVE-2026-111816
Apache Traffic Server forwarded a malformed 302 response that should h...
CVE-2026-111804
Apache Traffic Servers experimental wasm plugin has a use-after-free...
CVE-2026-111810
Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled...
CVE-2026-111814
Apache Traffic Servers default outbound session-sharing policy can re...
CVE-2026-112381
Apache Traffic Server can crash with a null pointer dereference when a...
UBUNTU-CVE-2026-111816
Apache Traffic Server forwarded a malformed 302 response that should h...