PT-2026-65750
CVE-2026-58162
·
Published
2026-07-29
·
Updated
2026-08-07
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Apache Traffic Server versions 8.0.0 through 8.1.9
Apache Traffic Server versions 9.0.0 through 9.2.14
Apache Traffic Server versions 10.0.0 through 10.1.3
Description
The certifier plugin generates certificates based on the client SNI (Server Name Indication), which can be controlled by an attacker.
Recommendations
Upgrade Apache Traffic Server versions 8.0.0 through 8.1.9 and 9.0.0 through 9.2.14 to version 9.2.15.
Upgrade Apache Traffic Server versions 10.0.0 through 10.1.3 to version 10.1.4.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾