CRITICALCVSS v3.1 9.0Vulnerability
CVE-2026-111811
Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the shared proxy cache. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0. Users are recommended to upgrade to version 9.2.16, 10.1.5, or 10.2.1, which fix the issue.
Properties
- First seen
- 2026-10-22T23:05:08+00:00
- Epss score
- 0.00259
- Cvss score
- 9
- Last seen
- 2026-10-22T23:05:08+00:00
- Euvd assigner
- apache
- Retrieved at
- 2026-10-23T00:34:22+00:00
- Src batch id
- euvd-20261023T003402Z-4d1819
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107535
- Score
- 9
- Euvd base score version
- 4.0
- Fetched at
- 2026-10-23T00:34:21+00:00
- Euvd vendor
- Apache Software Foundation
- Cvss vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
- First seen by Signal
- 2026-10-21T22:34:38+00:00
- Euvd base score
- 9.4
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
- Content hash
- bc6e17c9cdfcd5774b3f83e7ad3f013f574b521fbfe614a594c298ad2e1433c8
- Published at
- 2026-10-21T20:17:22.920
- Euvd updated
- 2026-10-22T23:05:08+00:00
- Last modified
- 2026-10-22T16:56:52.840
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph