THREAT OPS › Threat News › CVE-2026-22068+more: multiple vulnerabilities in Apache Traffic Server prior to 9.2.15/10.1.4
CVE-2026-22068+more: multiple vulnerabilities in Apache Traffic Server prior to 9.2.15/10.1.4
<p>Posted by Valtteri Vuorikoski on Jul 30</p>Forward of the announcement posted to the Apache Traffic Server announcement<br /> list on Tuesday with 38 vulnerabilities of varying severities, up to CVSS 10 in<br /> some cases. CVSS scores are given on the announcement web page at<br /> <<a href="https://trafficserver.apache.org/security-2026-07.html" rel="nofollow">https://trafficserver.apache.
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Indicators of compromise
- CVE-2026-22068cve
- https://trafficserver.apache.org/security-2026-07.htmlurl
Original source: https://seclists.org/oss-sec/2026/q3/338