Improper Input Validation vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 9.2.0 through 9.2.14, from 10.1.0 through 10.1…

A vulnerability identified as CVE-2026-33267 has been disclosed in Apache Traffic Server involving Improper Input Validation. The issue affects Apache Traffic Server versions 9.2.0 through 9.2.14 and 10.1.0 through 10.1.3. The vulnerability could allow attackers to exploit the improper handling of input within the server. Users running affected versions are at risk and should take immediate action. The recommended remediation is to upgrade to version 9.2.15 or 10.1.4, both of which contain the fix. The vulnerability was published via the NVD (National Vulnerability Database) and additional details are available via the Apache mailing list. No specific exploit details or active exploitation indicators have been provided in the advisory. Organizations using Apache Traffic Server in their infrastructure should prioritize patching to mitigate potential risks.