Warning: Multiple vulnerabilities in Apache Traffic Server, Patch Immediately!

Apache Traffic Server security bulletin (last updated 29/07/2026) details a patch addressing 38 vulnerabilities across ATS 9.x and 10.x, including multiple high-severity issues (several CVE-2026-5815x with CVSS ≈ 9.2) related to HTTP header parsing that could enable HTTP request smuggling, resource exhaustion, path traversal and out-of-bounds writes; vendors and CCB advise immediate upgrades to 9.2.15+ and 10.1.4+ and heightened monitoring, noting no public proof-of-concept or in-the-wild exploitation reported.