Apache Traffic Server Desynchronization Zero-Day (CVE-2026-63078)
A desynchronization zero-day in Apache Traffic Server was exposed during human-guided research by PortSwigger. The issue has been patched, but public records…
Tag: HTTP Desync
HTTP Terminator: AI-Powered HTTP Desync Research Tool
HTTP Terminator is an open-source AI-assisted research system built by James Kettle at PortSwigger. It generated 30,000 candidate attack vectors from RFC…
Apache Traffic Server Zero-Day Vulnerability
Apache Traffic Server was found to have a desynchronization zero-day vulnerability (CVE-2026-63078) during research by PortSwigger. The issue has been patched, but…