CVE-2026-111813 | Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0 magick plugin data authenticity

October 21, 2026 Yanac

A vulnerability was found in Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0. It has been declared as critical. Affected is an unknown function of the component magick plugin. The manipulation results in insufficient verification of data authenticity.

This vulnerability is reported as CVE-2026-111813. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More