Home › CVE Intelligence › CVE-2026-41920
CVSS 9.3 CRITICAL Vulnerability

CVE-2026-41920: CVE-2026-41920 - Apache Traffic Server: SNI to Host header matching policy is not properl…

CVE ID : CVE-2026-41920 Published : July 29, 2026, 7:18 a.m. | 45minutes ago Description : Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.1…

9.3CVSS Score
CRITICALSeverity
NOCISA KEV
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-41920
VendorMultiple Vendors
Affected ProductMultiple Products
Vulnerability TypeVulnerability
CVSS Score9.3 (CRITICAL)
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

CVE ID : CVE-2026-41920

Published : July 29, 2026, 7:18 a.m. | 45minutes ago

Description : Improper Access Control vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 9.0.0 through 9.1.14, from 10.0.0 through 10.1.3.

Users are recommende... [Full analysis available on Pro]

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-41920 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence