HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-58187 — The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on...

·Source: NIST NVD

Updated:

Executive Summary

The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of service. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

Analysis

The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of service. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue. CVSS Score: 3.7. Published: 2026-07-29T10:16:43.950.

Indicators of Compromise (1)

CVE (1)
CVE-2026-58187
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 29, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

FCA streamlines transaction reporting obligations

Transaction reporting requirements become smarter, simpler and more proportionate under new rules from the FCA.

Finextra
MEDIUMVulnerabilityNEW

Santander embeds eSim package within mobile app

Banco Santader customers in Spain can now purchase and activate mobile data for roaming abroad, directly in the bank's mobile app.

Finextra
MEDIUMVulnerability

Mastercard strengthens Asia Pacific leadership team

Mastercard today announced that Joyce Bo has joined the company as Executive Vice President, Core Payments, Asia Pacific.

Finextra