Home › CVE Intelligence › CVE-2026-58150
CVSS 10.0 CRITICAL Vulnerability

CVE-2026-58150: CVE-2026-58150 - Apache Traffic Server: HTTP/2 requests with Transfer-Encoding are not re…

CVE ID : CVE-2026-58150 Published : July 29, 2026, 7:30 a.m. | 33minutes ago Description : Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade request smuggling. This issue aff…

10.0CVSS Score
CRITICALSeverity
NOCISA KEV
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-58150
VendorMultiple Vendors
Affected ProductMultiple Products
Vulnerability TypeVulnerability
CVSS Score10.0 (CRITICAL)
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

CVE ID : CVE-2026-58150

Published : July 29, 2026, 7:30 a.m. | 33minutes ago

Description : Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade request smuggling.

This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, ... [Full analysis available on Pro]

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-58150 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence