CVE-2026-111810

Vendor

Apache Software Foundation

Product

Other Apache projects

CVSS

7.5

EPSS

0.004 (p29)

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 20
   CVE NVD 10d ago

   Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every internal @ header they strip, so a request…

   Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every internal @ header they strip, so a request carrying many such headers makes the proxy write far more log data than the request…

   CVSS 7.5 Fix available CVE-2026-111810 Apache Software Foundation