CVE-2026-58178 | Apache Traffic Server up to 8.1.9/9.2.14/10.1.3 ESI Plugin out-of-bounds write

A vulnerability classified as problematic has been found in Apache Traffic Server up to 8.1.9/9.2.14/10.1.3. This affects an unknown function of the component ESI Plugin. Performing a manipulation results in out-of-bounds write.

This vulnerability is reported as CVE-2026-58178. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More