Vulnerability Details CVE-2026-58177
The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors.
This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3.
Users are recommended to upgrade to version 10.1.4, which fix the issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 22.7%
CVSS Severity
CVSS v3 Score 8.1