Back to CVE List

CVE-2026-24033

HIGH SEVERITY

CVSS Score & Metrics

Base Score
7.2 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Vulnerability Description

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3, from 9.0.0 through 9.2.14.

Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-444
Source
NVD
Vendor
Apache Software Foundation
Product
Apache Traffic Server

External References

Discussion (0)

Add Comment

No comments yet. Be the first!