CVE-2026-58187

The CVE-2026-58187 entry concerns Apache Traffic Server, specifically the multiplexer plugin’s chunk-decode buffer overruns on upstream input, which can lead to denial of service. Affected versions are 8.0.0–8.1.9, 9.0.0–9.2.14, and 10.0.0–10.1.3. Remediation is to upgrade to versions 9.2.15 or 1...

CVE-2026-58187 Apache Traffic Server: Multiplexer plugin chunk decoder enables a denial of service

The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of service. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.1...