Apache Traffic Server: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Traffic Server ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand auszulösen sowie Daten zu manipulieren oder offenzulegen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-411215 linked CVEs
Open advisory with all CVEs
More on Traffic
Other advisories
- MediumCVE-2026-116609Osamaesh WP Visitor Statistics (Real Time Traffic): SQL-Injection
- MediumCVE-2026-116609Osamaesh WP Visitor Statistics (Real Time Traffic): SQL-Injection
- CriticalCVE-2026-112381Apache Traffic Server: Mehrere Schwachstellen
- Not ratedosv:CLEANSTART-2026-ZQ04316Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet meta...
- HighCVE-2026-112381Apache Traffic Server: Null-Pointer-Dereferenzierung
- MediumCVE-2026-111817Apache Traffic Server: unkontrollierter Ressourcenverbrauch
- CriticalCVE-2026-111815Apache Traffic Server: unzureichende Zertifikatvalidierung
- CriticalCVE-2026-111814Apache Traffic Server: unzureichende Zertifikatvalidierung
Other news entries
- Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption KeysNewsThe Hacker News
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesNewsThe Hacker News
- Apache Traffic Server: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- 333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext emailNewsArs Technica — Security
- Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH ConnectionsNewsThe Hacker News
- 14 ways attackers abuse cloud services to hack your enterpriseNewsCSO Online
- F5 rushes out emergency NGINX patches for three critical flawsNewsCSO Online
- Researchers Infiltrate Microsoft Tech Support Scam OperationNewsDark Reading
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4112
ID