https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:42:06.642221+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-31698 CVE-2025-31698 — Apache Traffic Server: Client IP address from PROXY protocol is not used for ACL 2026-10-06T09:42:06.658911+00:00

Affected: Apache Software Foundation Apache Traffic Server

ACL configured in ip_allow.config or remap.config does not use IP addresses that are provided by PROXY protocol.

Users can use a new setting (proxy.config.acl.subjects) to choose which IP addresses to use for the ACL if Apache Traffic Server is configured to accept PROXY protocol.  This issue affects undefined: from 10.0.0 through 10.0.6, from 9.0.0 through 9.2.10.

Users are recommended to upgrade to version 9.2.11 or 10.0.6, which fixes the issue.