EXPOSURES › CVE-2026-58177

CVE-2026-58177

HIGH

DETAIL

SourceNVD · cve Published2026-07-29 CVSS8.1 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-58177 ↗

▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED

apache · vendor traffic server · product

DESCRIPTION

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.