<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-05T02:42:18.763595+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-277894</id>
    <title>EUVD-2026-277894</title>
    <updated>2026-10-05T02:42:18.877809+00:00</updated>
    <content>EUVD-2026-277894</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-277894"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2026-34475</id>
    <title>fkie_cve-2026-34475</title>
    <updated>2026-10-05T02:42:18.877863+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2026-34475"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-m9gq-cmcj-p62x</id>
    <title>GHSA-m9gq-cmcj-p62x</title>
    <updated>2026-10-05T02:42:18.877913+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-m9gq-cmcj-p62x"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2026-2677</id>
    <title>OESA-2026-2677 — varnish security update</title>
    <updated>2026-10-05T02:42:18.877940+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: varnish, openEuler:20.03-LTS-SP4: varnish, openEuler:22.03-LTS-SP4: varnish, openEuler:24.03-LTS-SP1: varnish</p>
<p>This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x, depending on your architecture.

Security Fix(es):</p>
<p>Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass.(CVE-2026-34475)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2026-2677"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34475</id>
    <title>UBUNTU-CVE-2026-34475</title>
    <updated>2026-10-05T02:42:18.877986+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:14.04:LTS: varnish, Ubuntu:Pro:16.04:LTS: varnish, Ubuntu:Pro:18.04:LTS: varnish, Ubuntu:Pro:20.04:LTS: varnish, Ubuntu:Pro:22.04:LTS: varnish, Ubuntu:24.04:LTS: varnish, Ubuntu:25.10: varnish, Ubuntu:26.04:LTS: varnish</p>
<p>Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34475"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0749</id>
    <title>WID-SEC-W-2026-0749 — Varnish HTTP Cache: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen</title>
    <updated>2026-10-05T02:42:18.878034+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Varnish HTTP Cache ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0749"/>
  </entry>
</feed>
