CVE-2026-111804 | Apache Traffic Server up to 10.1.4/10.2.0 experimental wasm plugin transaction-close handler use after free

October 21, 2026 Yanac

A vulnerability was found in Apache Traffic Server up to 10.1.4/10.2.0. It has been classified as critical. This impacts the function transaction-close handler of the component experimental wasm plugin. The manipulation leads to use after free.

This vulnerability is documented as CVE-2026-111804. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More