CVE-2024-50306

9.1 criticalEPSS 1.6%

Critical (9.1) in apache traffic server. EPSS 1.6% chance of exploitation in the next 30 days.

Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-252
Published: 2024-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apache:traffic_server

References

https://lists.apache.org/thread/y15fh6c7kyqvzm0f9odw7c5jh4r4np0y
https://lists.debian.org/debian-lts-announce/2025/02/msg00018.html

Check your stack JSON