Apache HTTP Server mod_proxy_ajp out-of-bounds read (CVE-2026-33857)

Summary

AJP response processing may read beyond a valid memory buffer.

Vulnerability ID	Vulnerability Overview
CVE-2026-33857	An out-of-bounds read in mod_proxy_ajp may expose memory outside the intended response buffer. The issue affects processing through the AJP proxy module.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16
 

 

Back to Security Notices

Date	Description
10/14/2026	Initial release

Back to Security Notices