Apache Software Foundation

    Dashboard / Vendors

    Products: 18
    Vulnerabilities: 93
    Known Exploited: 0
    29
    Critical Level Threats
    36
    High Level Threats
    16
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-112381

    Apache Traffic Server: Nullptr dereference in net_write_io on a POST half-close with chunked response

    Last Modified: Oct 23, 2026
    Published: Oct 21, 2026

    CVE-2026-111817

    Apache Traffic Server: Dropping chunked trailers stalls a passthrough transfer until timeout

    Last Modified: Oct 23, 2026
    Published: Oct 21, 2026

    CVE-2026-111812

    Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials

    Last Modified: Oct 23, 2026
    Published: Oct 21, 2026

    CVE-2026-111811

    Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication

    Last Modified: Oct 26, 2026
    Published: Oct 21, 2026

    CVE-2026-111809

    Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smuggling

    Last Modified: Oct 28, 2026
    Published: Oct 21, 2026
    Items Per Page