CVE-2026-58179
Received Received - Intake

Stack Overflow in Apache Traffic Server regex_remap Plugin

Publication date: 2026-07-29

Last updated on: 2026-07-30

Assigner: Apache Software Foundation

Description
The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-29
Last Modified
2026-07-30
Generated
2026-07-30
AI Q&A
2026-07-30
EPSS Evaluated
N/A
NVD
CVE-2026-58179

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
apache traffic_server From 8.0.0 (inc) to 8.1.9 (inc)
apache traffic_server From 9.0.0 (inc) to 9.2.14 (inc)
apache traffic_server From 10.0.0 (inc) to 10.1.3 (inc)
apache traffic_server 9.2.15
apache traffic_server 10.1.4

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a stack and integer overflow in the Apache Traffic Server's regex_remap plugin. It occurs when processing substitution input, potentially allowing attackers to execute arbitrary code or cause denial of service by overwriting memory or corrupting data.

Impact Analysis

If exploited, this flaw could lead to system crashes, unauthorized code execution, or data corruption. Attackers might gain control over affected systems, steal sensitive information, or disrupt services relying on Apache Traffic Server.

Mitigation Strategies
  • Upgrade Apache Traffic Server to version 9.2.15 or 10.1.4 or later to fix the issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58179. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart