https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:06:57.356760+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-08196 bdu:2025-08196 2026-10-04T01:06:57.491791+00:00 bdu:2025-08196 https://cve.radiocsirt.org/vuln/cnvd-2025-15619 cnvd-2025-15619 2026-10-04T01:06:57.491830+00:00 cnvd-2025-15619 https://cve.radiocsirt.org/vuln/euvd-2026-245181 EUVD-2026-245181 2026-10-04T01:06:57.491845+00:00 EUVD-2026-245181 https://cve.radiocsirt.org/vuln/fkie_cve-2025-31698 fkie_cve-2025-31698 2026-10-04T01:06:57.491856+00:00

ACL configured in ip_allow.config or remap.config does not use IP addresses that are provided by PROXY protocol.

Users can use a new setting (proxy.config.acl.subjects) to choose which IP addresses to use for the ACL if Apache Traffic Server is configured to accept PROXY protocol.  This issue affects undefined: from 10.0.0 through 10.0.6, from 9.0.0 through 9.2.10.

Users are recommended to upgrade to version 9.2.11 or 10.0.6, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-v2wx-jg5q-pj8q GHSA-v2wx-jg5q-pj8q 2026-10-04T01:06:57.491890+00:00

ACL configured in ip_allow.config or remap.config does not use IP addresses that are provided by PROXY protocol.

Users can use a new setting (proxy.config.acl.subjects) to choose which IP addresses to use for the ACL if Apache Traffic Server is configured to accept PROXY protocol.  This issue affects undefined: from 10.0.0 through 10.0.6, from 9.0.0 through 9.2.10.

Users are recommended to upgrade to version 9.2.11 or 10.0.6, which fixes the issue.

 https://cve.radiocsirt.org/vuln/oesa-2025-1731 OESA-2025-1731 — trafficserver security update 2026-10-04T01:06:57.491910+00:00

Affected: openEuler:24.03-LTS-SP1: trafficserver

Apache Traffic Server is an OpenSource HTTP / HTTPS / HTTP/2 / QUIC reverse, forward and transparent proxy and cache. Security Fix(es):

Apache Traffic Server (ATS) is a set of scalable HTTP proxy and caching servers from the Apache Foundation in the United States. Apache Traffic Server (ATS) versions 10.0.0 to 10.0.6 and 9.0.0 to 9.2.10 have access control error vulnerabilities due to the ACL configuration not using the IP address provided by the PROXY protocol.(CVE-2025-31698)

ESI plugin does not have the limit for maximum inclusion depth, and that allows excessive memory consumption if malicious instructions are inserted.

Users can use a new setting for the plugin (--max-inclusion-depth) to limit it. This issue affects Apache Traffic Server: from 10.0.0 through 10.0.5, from 9.0.0 through 9.2.10.

Users are recommended to upgrade to version 9.2.11 or 10.0.6, which fixes the issue.(CVE-2025-49763)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-31698 UBUNTU-CVE-2025-31698 2026-10-04T01:06:57.491940+00:00

Affected: Ubuntu:16.04:LTS: trafficserver, Ubuntu:18.04:LTS: trafficserver, Ubuntu:Pro:20.04:LTS: trafficserver, Ubuntu:Pro:22.04:LTS: trafficserver, Ubuntu:24.04:LTS: trafficserver, Ubuntu:25.10: trafficserver

ACL configured in ip_allow.config or remap.config does not use IP addresses that are provided by PROXY protocol. Users can use a new setting (proxy.config.acl.subjects) to choose which IP addresses to use for the ACL if Apache Traffic Server is configured to accept PROXY protocol. This issue affects undefined: from 10.0.0 through 10.0.6, from 9.0.0 through 9.2.10. Users are recommended to upgrade to version 9.2.11 or 10.0.6, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1355 WID-SEC-W-2025-1355 — Apache Traffic Server: Mehrere Schwachstellen 2026-10-04T01:06:57.491970+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Apache Traffic Server ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Denial of Service Zustand herbeizuführen.