Apache HTTP Server mod_proxy_ajp heap over-read (CVE-2026-34059)

Summary

AJP data parsing may disclose server memory.

Vulnerability ID	Vulnerability Overview
CVE-2026-34059	The ajp_parse_data() function in mod_proxy_ajp can read beyond a heap buffer. Crafted AJP data may expose memory contents outside the intended message.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16
 

 

Back to Security Notices

Date	Description
10/14/2026	Initial release

Back to Security Notices