Cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aapachetraffic_server/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 21 Oct 2026 19:58:34 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgApache Traffic Server: Request smuggling vulnerability (CVE-2025-31699)https://feed.craftedsignal.io/briefs/2026-10-apache-traffic-server-request-smuggling/Wed, 21 Oct 2026 19:58:34 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-apache-traffic-server-request-smuggling/Apache Traffic Server is vulnerable to request smuggling due to the improper handling of shared origin connections when client request bodies are incomplete, allowing cache poisoning and access control bypass.Apache Traffic Server (ATS) incorrectly returns an origin connection to the shared pool while the connection is still expecting a request body from the client, including instances involving the 'Expect: 100-continue' header. An attacker can exploit this behavior by sending a partial request, causing the origin to interpret subsequent requests from other users as leftover body data. This allows for request smuggling, potentially leading to unauthorized access, cross-user request disruption, or cache poisoning.

Impact

Successful exploitation permits an attacker to bypass ATS access controls, intercept or disrupt legitimate user requests, and perform cache poisoning. The vulnerability carries a CVSS v3.1 base score of 8.9.

Recommendation

Upgrade Apache Traffic Server instances to the patched versions: 9.2.16, 10.1.5, or 10.2.1.

]]>criticaladvisoryrequest-smugglingvulnerabilitywebservercache-poisoningcve-2026-111816rcecve-2026-111813