CVE-2026-58152 | Apache Traffic Server up to 8.1.9/9.2.14/10.1.3 HPACK-XPACK Header Decoding buffer overflow

A vulnerability was found in Apache Traffic Server up to 8.1.9/9.2.14/10.1.3 and classified as very critical. The impacted element is an unknown function of the component HPACK-XPACK Header Decoding. Executing a manipulation can lead to buffer overflow.

The identification of this vulnerability is CVE-2026-58152. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More