High severity7.5NVD Advisory· Published Jul 18, 2026· Updated Aug 6, 2026
CVE-2026-59173
CVE-2026-59173
Description
Uncontrolled Resource Consumption vulnerability in Apache Traffic Server.
This issue affects Apache Traffic Server: from 9.0.0 through 9.1.13, from 10.0.0 through 10.1.2.
Users are recommended to upgrade to version 9.1.14 or 10.1.3, which fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*range: >=9.0.0,<9.2.14
- (no CPE)range: from 9.0.0 through 9.1.13, from 10.0.0 through 10.1.2
Patches
Vulnerability mechanics
References
2- www.openwall.com/lists/oss-security/2026/07/17/5nvdMailing ListThird Party Advisory
- lists.apache.org/thread/lhlbhphmv5dsfgx1fx84mgonzbocpzhdnvdMailing ListVendor Advisory
News mentions
3- Weekly Cyber Security Newsletter Bulletin – Certighost Exploit, Checkpoint 0-day, HTTP/2 Flaw, Notepad++ Plugin Abuse +20 StoriesCyber Security News · Jul 26, 2026
- New HTTP/2 Vulnerability Lets Hackers Crash Servers With Memory Exhaustion AttacksCyber Security News · Jul 24, 2026
- ⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and MoreThe Hacker News · Jul 20, 2026