Skip to content

CVE record · 1 source

CVE-2026-111812

CVSS 10.0

Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers under the proxy's own…

Vendor: Apache Software Foundation
Product: Other Apache projects
CVSS: 10.0
EPSS: 0.004 (p30)
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 10d ago

Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers under the proxy's own…

Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers under the proxy's own credentials. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from…

CVSS 10.0 Fix available CVE-2026-111812 Apache Software Foundation