Product · Apache Software Foundation

Apache Traffic Server

111 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 10.0

CVE-2026-33267 Public exploit

Apache Traffic Server: Untrusted @ headers can spoof ATS internal metadata

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.14, from 10.1.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.

Apache Software Foundation Apache Traffic Server trafficserver trafficserver Debian Ubuntu

Jul 29, 2026
Unscored —

CVE-2018-8004 Public exploit

There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apach…

Apache Software Foundation Apache Traffic Server trafficserver trafficserver Debian Ubuntu

Aug 29, 2018