Apache · Apache Traffic Server · CVE-2026-33267
**Name of the Vulnerable Software and Affected Versions**
Apache Traffic Server versions 9.2.0 through 9.2.14
Apache Traffic Server versions 10.1.0 through 10.1.3
**Description**
Improper Input Validation allows untrusted @ headers to spoof internal metadata.
**Recommendations**
Upgrade Apache Traffic Server versions 9.2.0 through 9.2.14 to version 9.2.15.
Upgrade Apache Traffic Server versions 10.1.0 through 10.1.3 to version 10.1.4.