PatchSiren cyber security CVE debrief
CVE-2026-58159 Apache CVE debrief
Apache Traffic Server has a vulnerability allowing IP access controls to be bypassed on UDS listeners due to ACL matching errors. This affects versions 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3. The issue allows unauthorized access and potential security breaches. Users of Apache Traffic Server, especially those with high security requirements or using versions within the affected ranges, should be aware of this vulnerability and take necessary actions to upgrade or mitigate the risk. Evidence is limited to public CVE and NVD information. Defenders should verify affected versions, review access controls, and monitor for potential exploitation attempts. The CVE record was published on 2026-07-29T10:16:41.490Z and has not been modified since then.
- Vendor
- Apache
- Product
- Traffic Server
- CVSS
- HIGH 7
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-07-29
- Original CVE updated
- 2026-08-03
- Advisory published
- 2026-07-29
- Advisory updated
- 2026-08-03
Who should care
Users of Apache Traffic Server, especially those with high security requirements or using versions within the affected ranges, should be aware of this vulnerability and take necessary actions to upgrade or mitigate the risk. This includes reviewing and updating access controls, monitoring for potential exploitation attempts, and considering compensating controls for exposed systems. IT teams responsible for Apache Traffic Server deployments should prioritize this vulnerability due to its high CVSS score and potential for access control bypass.
Technical summary
The vulnerability in Apache Traffic Server allows IP access controls to be bypassed on UDS listeners and through ACL matching errors. Affected versions include 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3. The issue is fixed in versions 9.2.15 and 10.1.4. This bypass can lead to unauthorized access and potential security breaches. Users of Apache Traffic Server, especially those with high security requirements or using versions within the affected ranges, should be aware of this vulnerability and take necessary actions to upgrade or mitigate the risk.
Defensive priority
High priority due to high CVSS score and potential for access control bypass.
Recommended defensive actions
- Upgrade to version 9.2.15 or 10.1.4
- Review and update access controls
- Monitor for potential exploitation attempts
- Review compensating controls for exposed systems
- Check relevant monitoring, detection, and logs for exposed assets
- Track exceptions and retest remediated assets
- Confirm whether affected product deployments exist in managed environments
Evidence notes
The CVE record and NVD entry provide details on the vulnerability and affected versions. Vendor advisory is available via a mailing list. The issue allows IP access controls to be bypassed on UDS listeners and through ACL matching errors in Apache Traffic Server versions 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4. Evidence is limited to public CVE and NVD information. Defenders should verify affected versions, review access controls, and monitor for potential exploitation attempts.
Official resources
-
CVE-2026-58159 CVE record
CVE.org
-
CVE-2026-58159 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Mailing List, Vendor Advisory
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-29T10:16:41.490Z and has not been modified since then.