CVE WATCH / VULNERABILITY DETAIL
CVE-2025-31699
HIGHCVSS 8.9NVD feed
Published 21 October 2026 · tracked since 22 October 2026
Description
Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request body the client declared but never fully sent, including when the client used Expect: 100-continue. The origin then reads a later request on that connection as leftover body data,
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-114724 HIGH 7.4
- CVE-2026-114715 MEDIUM 6.8
- CVE-2026-114658 HIGH 8.8
- CVE-2026-114636 HIGH 8.7
- CVE-2026-114638 HIGH 8.7
- CVE-2026-114640 HIGH 8.7
- CVE-2026-114577 HIGH 7.3
- CVE-2026-12664 MEDIUM 6.8
- CVE-2026-15723 HIGH 8.2
- CVE-2026-110264 CRITICAL 10