Skip to content
Noroxi

Apache Community

33 credited records · 33 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Apache Community

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-111812
    28Monitor

    Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials

    HighCVSS 7.0No exploitEPSS 0%

    apache software foundation · apache traffic serverOct 21, 2026

  • CVE-2026-111811
    37Monitor

    Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication

    CriticalCVSS 9.4No exploitEPSS 0%

    apache software foundation · apache traffic serverOct 21, 2026

  • CVE-2026-111810
    34Monitor

    Apache Traffic Server: Unthrottled per-header diagnostic logging enables a log-flood denial of service

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache traffic serverOct 21, 2026

  • CVE-2026-111809
    27Monitor

    Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smuggling

    MediumCVSS 6.9No exploitEPSS 0%

    apache software foundation · apache traffic serverOct 21, 2026

  • CVE-2026-111816
    36Monitor

    Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-out

    CriticalCVSS 9.2No exploitEPSS 0%

    apache software foundation · apache traffic serverOct 21, 2026

  • CVE-2026-111813
    40Plan

    Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration

    CriticalCVSS 10.0No exploitEPSS 0%

    apache software foundation · apache traffic serverOct 21, 2026

  • CVE-2026-111804
    35Monitor

    Apache Traffic Server: wasm plugin has a use-after-free and forwards unvalidated guest metric IDs

    HighCVSS 8.8No exploitEPSS 0%

    apache software foundation · apache traffic serverOct 21, 2026

  • CVE-2026-102795
    28Monitor

    Apache Traffic Server: SNI to Host header matching policy is not properly enforced

    HighCVSS 7.0No exploitEPSS 0%

    apache software foundation · apache traffic serverOct 2, 2026

  • CVE-2026-65100
    25Monitor

    Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode

    MediumCVSS 6.3No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58188
    33Monitor

    Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins

    HighCVSS 8.4No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58181
    32Monitor

    Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash

    HighCVSS 8.2No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58180
    32Monitor

    Apache Traffic Server: txn_box plugin overflows the stack from attacker input

    HighCVSS 8.2No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58179
    36Monitor

    Apache Traffic Server: regex_remap plugin overflows the stack from attacker input

    CriticalCVSS 9.2No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58178
    32Monitor

    Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery

    HighCVSS 8.2No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58177
    33Monitor

    Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

    HighCVSS 8.3No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58164
    33Monitor

    Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free

    HighCVSS 8.3No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58163
    33Monitor

    Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server

    HighCVSS 8.3No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58160
    25Monitor

    Apache Traffic Server: Out-of-bounds reads while parsing DNS responses

    MediumCVSS 6.3No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58159
    28Monitor

    Apache Traffic Server: Listener and ACL handling allow access-control bypass

    HighCVSS 7.0No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58158
    32Monitor

    Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow

    HighCVSS 8.2No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58157
    27Monitor

    Apache Traffic Server: Improper server-session reuse can expose data across client connections

    MediumCVSS 6.9No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-65325
    25Monitor

    Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification

    MediumCVSS 6.3No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-65324
    32Monitor

    Apache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustion

    HighCVSS 8.2No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58156
    25Monitor

    Apache Traffic Server: URL and port parsing errors allow access-control bypass

    MediumCVSS 6.3No exploitEPSS 0%

    apache · traffic serverJul 29, 2026

  • CVE-2026-58154
    36Monitor

    Apache Traffic Server: Memory-safety errors in MIME and header parsing

    CriticalCVSS 9.2No exploitEPSS 0%

    apache · traffic serverJul 29, 2026