Apache mod_proxy XSS vulnerability (CVE-2019-10092)

Sep 09, 2026

A limited Cross-Site Scripting flaw exists in error pages generated by Apache mod_proxy.

Vulnerability ID	Vulnerability Overview
CVE-2019-10092	A flaw in `mod_proxy` error page generation allows an attacker to inject script code via a crafted request URL, executing malicious scripts in the victim's browser.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12

Date	Description
09/09/2026	Initial release