CVE-2026-111812 | Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0 origin_server_auth plugin privileges management

October 21, 2026 Yanac

A vulnerability described as critical has been identified in Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0. This affects an unknown function of the component origin_server_auth plugin. Such manipulation leads to improper privilege management.

This vulnerability is uniquely identified as CVE-2026-111812. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More