CVE-2026-24033 in Traffic Server

Riassunto

di MITRE • 29/07/2026

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3, from 9.0.0 through 9.2.14.

Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: Apache
• Prenotare: 20/01/2026
• Divulgazione: 29/07/2026
• Moderazione: accettato
• Voce: VDB-384079
• CPE: pronto
• CWE: CWE-440 (confermato)
• CVSS: 10.0 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-24033
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-24033
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-24033/