PT-2026-29793

CVE-2025-65114

·

Published

2026-04-02

·

Updated

2026-05-29

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 9.0.0 through 9.2.12 and 10.0.0 through 10.1.1
Description Apache Traffic Server is susceptible to request smuggling when handling malformed chunked messages. This can potentially lead to various security issues.
Recommendations Upgrade to version 9.2.13 or 10.1.2.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-444: Inconsistent Interpretation of HTTP Requests (\'HTTP Request/Response Smuggling\')
Related identifiers
CVE-2025-65114
OESA-2026-2383
OESA-2026-2385
OESA-2026-2532
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com