https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:07:43.273075+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:0418 ALSA-2022:0418 — Important: varnish:6 security update 2026-10-03T21:07:43.286786+00:00

Affected: AlmaLinux:8: varnish, AlmaLinux:8: varnish-devel, AlmaLinux:8: varnish-docs, AlmaLinux:8: varnish-modules

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: HTTP/1 request smuggling vulnerability (CVE-2022-23959)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bit-varnish-2022-23959 BIT-varnish-2022-23959 2026-10-03T21:07:43.286882+00:00

Affected: Bitnami: varnish

In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections.

 https://cve.radiocsirt.org/vuln/euvd-2026-13962 EUVD-2026-13962 2026-10-03T21:07:43.286918+00:00 EUVD-2026-13962 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23959 fkie_cve-2022-23959 2026-10-03T21:07:43.286939+00:00

In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections.

 https://cve.radiocsirt.org/vuln/ghsa-fcqv-r8cv-f88h GHSA-fcqv-r8cv-f88h 2026-10-03T21:07:43.286970+00:00

In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections.

 https://cve.radiocsirt.org/vuln/gsd-2022-23959 gsd-2022-23959 2026-10-03T21:07:43.286993+00:00 gsd-2022-23959 https://cve.radiocsirt.org/vuln/oesa-2022-1623 OESA-2022-1623 — varnish security update 2026-10-03T21:07:43.287011+00:00

Affected: openEuler:20.03-LTS-SP1: varnish, openEuler:20.03-LTS-SP2: varnish, openEuler:20.03-LTS-SP3: varnish, openEuler:22.03-LTS: varnish

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x, depending on your architecture. Security Fix(es): In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections(CVE-2022-23959)

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0148-1 openSUSE-SU-2022:0148-1 — Security update for varnish 2026-10-03T21:07:43.287054+00:00

Security update for varnish

 https://cve.radiocsirt.org/vuln/rhsa-2022:0420 RHSA-2022:0420 — Red Hat Security Advisory: varnish:6 security update 2026-10-03T21:07:43.287083+00:00

varnish: HTTP/1 request smuggling vulnerability

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23959 UBUNTU-CVE-2022-23959 2026-10-03T21:07:43.287109+00:00

Affected: Ubuntu:14.04:LTS: varnish, Ubuntu:Pro:16.04:LTS: varnish, Ubuntu:18.04:LTS: varnish, Ubuntu:20.04:LTS: varnish, Ubuntu:22.04:LTS: varnish, Ubuntu:24.04:LTS: varnish, Ubuntu:25.10: varnish, Ubuntu:26.04:LTS: varnish

In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0198 WID-SEC-W-2022-0198 — Varnish HTTP Cache: Schwachstelle ermöglicht Offenlegung von Informationen und Cache Poisoning 2026-10-03T21:07:43.287153+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Varnish HTTP Cache ausnutzen, um Informationen offenzulegen und ein Cache Poisoning zu verursachen.