CVE-2026-58154
Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP headers. This issue affects Apache Traffic S
CVSS
8.9
High
EPSS
0.4%
p34
KEV
—
Exploit Today
10
0-100
Published: Jul 29, 2026 · Last modified: Aug 3, 2026 · CWE-787
0.4%EPSS · 30 days0.4%
2026-08-252026-09-22
Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP headers. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-180958.5 HIG—
———IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.5hCVE-2026-176368.8 HIG—
———IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity.5hCVE-2026-871219.8 CRI—
———lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device.6hCVE-2026-958627.5 HIG—
——0A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.7hCVE-2026-839637.8 HIG—
——0Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.8hCVE-2026-819987.8 HIG—
——0Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.8h