Skip to content

CVE record · 1 source

CVE-2026-111815

CVSS 10.0

Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed host's…

Vendor: Apache Software Foundation
Product: Other Apache projects
CVSS: 10.0
EPSS: 0.002 (p15)
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 10d ago

Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed host's…

Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed host's verify_client STRICT policy. This issue affects Apache Traffic Server: from 8.0.0…

CVSS 10.0 Fix available CVE-2026-111815 Apache Software Foundation