https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:53:54.611482+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-03281 bdu:2025-03281 2026-10-04T23:53:54.796548+00:00 bdu:2025-03281 https://cve.radiocsirt.org/vuln/bell-cve-2025-23419 BELL-CVE-2025-23419 2026-10-04T23:53:54.796583+00:00

Affected: Alpaquita:23: nginx, Alpaquita:stream: nginx

 https://cve.radiocsirt.org/vuln/bit-nginx-2025-23419 BIT-nginx-2025-23419 — TLS Session Resumption Vulnerability 2026-10-04T23:53:54.796613+00:00

Affected: Bitnami: nginx

When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0099 certfr-2025-avi-0099 — De multiples vulnérabilités ont été découvertes dans les produits F5. Certaines d'entre elles permettent à un attaquant… 2026-10-04T23:53:54.796640+00:00 certfr-2025-avi-0099 https://cve.radiocsirt.org/vuln/cleanstart-2026-af45008 Withdrawn: CLEANSTART-2026-AF45008 — When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumptio… 2026-10-04T23:53:54.796655+00:00

Withdrawn by the publisher.

Affected: CleanStart: nginx

Multiple security vulnerabilities affect the nginx package. When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-266504 EUVD-2026-266504 2026-10-04T23:53:54.796676+00:00 EUVD-2026-266504 https://cve.radiocsirt.org/vuln/fkie_cve-2025-23419 fkie_cve-2025-23419 2026-10-04T23:53:54.796687+00:00

When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/ghsa-84xh-pwc6-7g4g GHSA-84xh-pwc6-7g4g 2026-10-04T23:53:54.796719+00:00

When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-23419 msrc_CVE-2025-23419 — TLS Session Resumption Vulnerability 2026-10-04T23:53:54.796737+00:00 msrc_CVE-2025-23419 https://cve.radiocsirt.org/vuln/oesa-2025-1134 OESA-2025-1134 — nginx security update 2026-10-04T23:53:54.796752+00:00

Affected: openEuler:24.03-LTS: nginx, openEuler:24.03-LTS-SP1: nginx, openEuler:20.03-LTS-SP4: nginx, openEuler:22.03-LTS-SP3: nginx, openEuler:22.03-LTS-SP4: nginx

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server.

Security Fix(es):

When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2025-23419)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14737-1 openSUSE-SU-2025:14737-1 — nginx-1.27.4-1.1 on GA media 2026-10-04T23:53:54.796784+00:00

nginx-1.27.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-23419 UBUNTU-CVE-2025-23419 2026-10-04T23:53:54.796800+00:00

Affected: Ubuntu:Pro:14.04:LTS: nginx, Ubuntu:Pro:16.04:LTS: nginx, Ubuntu:Pro:18.04:LTS: nginx, Ubuntu:20.04:LTS: nginx, Ubuntu:22.04:LTS: nginx, Ubuntu:24.04:LTS: nginx

When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0274 WID-SEC-W-2025-0274 — NGINX: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-04T23:53:54.796828+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in NGINX NGINX Plus und NGINX ausnutzen, um Sicherheitsvorkehrungen zu umgehen.