PT-2026-104408 · Apache · Apache Traffic Server

Apache Community

+1

·

CVE-2026-102795

·

تاريخ النشر

2026-10-02

·

تاريخ التحديث

2026-10-03

CVSS v3.1

9.3

حرجة

المتجهAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N
Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 9.0.0 through 9.2.14 Apache Traffic Server versions 10.0.0 through 10.1.3
Description An improper access control issue exists where SNI-to-Host access control is not enforced. Approximately 311,500 instances are identified globally.
Recommendations Upgrade Apache Traffic Server versions 9.0.0 through 9.2.14 to version 9.2.15. Upgrade Apache Traffic Server versions 10.0.0 through 10.1.3 to version 10.1.4.

إصلاح

Improper Access Control

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
dbugs@ptsecurity.com

تصنيف نقاط الضعف

CWE-284

المعرّفات ذات الصلة

CVE-2026-102795

المنتجات المتأثرة

Apache Traffic Server