CVE-2026-63078
Named by 3 kept items in this workspace.
Search every workspace for CVE-2026-63078. It matches the name as written, so it can find other things that share it.
The items that name it 3
Zero-day in Apache Traffic Server discovered via a desync trigger combining a cache-poisoning-style Content-Location payload with a TRACE-based body payload, found through the HTTP Terminator's anomaly detection cascade; now patched.
Zero-day in Apache Traffic Server discovered via an HTTP Terminator cascade combining a badly-behaved AI-generated cache-poisoning-style payload, a permutation-system tweak, and a TRACE-based body payload, causing inline headers to appear in a response (desync). Reported as patched.
Desynchronization zero-day in Apache Traffic Server, found via a human-guided discovery cascade; since patched. As of an August 7 check by The Hacker News, no public record was found in CVE.org or NVD, and Apache's July advisory covering 34 flaws did not list it, leaving a verification gap mapping t
All cves in this workspace.