CVE-2026-33267

CriticalCVSS 10.0

Published: 29/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 29/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

Apache Traffic Server has an Improper Input Validation vulnerability. This affects versions from 9.2.0 to 9.2.14 and from 10.1.0 to 10.1.3.

Risk Assessment

An attacker could send a specially crafted request, potentially leading to unexpected server behavior, possibly enabling DoS attacks or other security breaches.

Recommendation

Upgrade to version 9.2.15 or 10.1.4, which fix the vulnerability.

Original NVD description (English source)

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.14, from 10.1.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.