CVE-2026-58177

HIGH

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue.

CVSS v3.1 Score

8.1
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H
Attack Vector
NETWORK
Complexity
HIGH
Privileges
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
HIGH
Published: 7/29/2026Modified: 7/31/2026

Related Intelligence (1)

CRITICALVulnerability

NVD CRITICAL: CVE-2026-58177 — The Apache Traffic Server Cripts framework has out-of-bounds writes, path traver...

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue.

CVE-2026-58177
NIST NVD

References (1)

https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6dMailing ListVendor Advisory