CVE-2026-57834
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Apache Traffic Server is vulnerable to request smuggling when chunked messages are malformed. This affects versions from 8.0.0 to 8.1.9, from 9.0.0 to 9.2.14, and from 10.0.0 to 10.1.3.
Risk Assessment
An attacker could exploit this vulnerability to manipulate network traffic, potentially bypassing security rules and gaining access to unauthorized resources.
Recommendation
Immediate upgrade to version 9.2.15 or 10.1.4 is recommended to fix the issue.
Original NVD description (English source)
Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.