https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:29:01.005907+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06964 bdu:2026-06964 2026-10-02T23:29:01.017442+00:00 bdu:2026-06964 https://cve.radiocsirt.org/vuln/bell-cve-2026-40460 BELL-CVE-2026-40460 2026-10-02T23:29:01.017478+00:00

Affected: Alpaquita:25: nginx, Alpaquita:stream: nginx

 https://cve.radiocsirt.org/vuln/bit-nginx-2026-40460 BIT-nginx-2026-40460 — NGINX ngx_quic_module vulnerability 2026-10-02T23:29:01.017506+00:00

Affected: Bitnami: nginx

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0591 certfr-2026-avi-0591 — De multiples vulnérabilités ont été découvertes dans les produits F5. Certaines d'entre elles permettent à un attaquant… 2026-10-02T23:29:01.017529+00:00 certfr-2026-avi-0591 https://cve.radiocsirt.org/vuln/euvd-2026-318103 EUVD-2026-318103 2026-10-02T23:29:01.017544+00:00 EUVD-2026-318103 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40460 fkie_cve-2026-40460 2026-10-02T23:29:01.017554+00:00

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/ghsa-h7rq-f9gq-mc8r GHSA-h7rq-f9gq-mc8r 2026-10-02T23:29:01.017574+00:00

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-40460 msrc_CVE-2026-40460 — NGINX ngx_quic_module vulnerability 2026-10-02T23:29:01.017587+00:00 msrc_CVE-2026-40460 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10796-1 openSUSE-SU-2026:10796-1 — nginx-1.31.0-1.1 on GA media 2026-10-02T23:29:01.017600+00:00

nginx-1.31.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:20351 RHSA-2026:20351 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T23:29:01.017617+00:00

nginx: ngx_http_rewrite_module: code execution and denial of service nginx: NGINX: Authorization bypass via IP spoofing in HTTP/3 QUIC module nginx: ngx_http_v3_module: use-after-free issue leads to denial of service nginx: NGINX Open Source: Data injection via HTTP/2 proxy configuration

 https://cve.radiocsirt.org/vuln/suse-su-2026:22943-1 SUSE-SU-2026:22943-1 — Security update for nginx 2026-10-02T23:29:01.017635+00:00

Security update for nginx

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40460 UBUNTU-CVE-2026-40460 2026-10-02T23:29:01.017648+00:00

Affected: Ubuntu:25.10: nginx, Ubuntu:26.04:LTS: nginx

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1527 WID-SEC-W-2026-1527 — NGINX Open Source and NGINX Plus: Mehrere Schwachstellen 2026-10-02T23:29:01.017667+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NGINX Open Source and NGINX Plus ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.