NetSight
high7.5

CVE-2026-58164

Apache Traffic Server has use-after-free and time-of-check/time-of-use errors in remap configuration handling.

Impact

Apache Traffic Server has use-after-free and time-of-check/time-of-use errors in remap configuration handling. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

Affected products

VendorProductAffected versions
ApacheTraffic Server
from 8.0.0 through 8.1.9
from 9.0.0 before 9.2.15
from 10.0.0 before 10.1.4

Weakness classification

References