Apache HTTP request smuggling (CVE-2022-22720)

Sep 09, 2026

Improper handling of discarded request bodies allows HTTP request smuggling.

Vulnerability ID	Vulnerability Overview
CVE-2022-22720	Apache HTTP Server fails to close inbound connections when errors occur discarding the request body. This allows subsequent smuggled requests to bypass filters.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12

Date	Description
09/09/2026	Initial release