https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:47:13.204969+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06962 bdu:2026-06962 2026-10-03T08:47:13.335119+00:00 bdu:2026-06962 https://cve.radiocsirt.org/vuln/bell-cve-2026-42926 Withdrawn: BELL-CVE-2026-42926 — CVE-2026-42926 does not affect BellSoft software 2026-10-03T08:47:13.335154+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-nginx-2026-42926 BIT-nginx-2026-42926 — NGINX ngx_http_proxy_v2_module vulnerability 2026-10-03T08:47:13.335174+00:00

Affected: Bitnami: nginx

When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0591 certfr-2026-avi-0591 — De multiples vulnérabilités ont été découvertes dans les produits F5. Certaines d'entre elles permettent à un attaquant… 2026-10-03T08:47:13.335204+00:00 certfr-2026-avi-0591 https://cve.radiocsirt.org/vuln/euvd-2026-318129 EUVD-2026-318129 2026-10-03T08:47:13.335234+00:00 EUVD-2026-318129 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42926 fkie_cve-2026-42926 2026-10-03T08:47:13.335247+00:00

When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/ghsa-v43f-895r-chhh GHSA-v43f-895r-chhh 2026-10-03T08:47:13.335269+00:00

When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10796-1 openSUSE-SU-2026:10796-1 — nginx-1.31.0-1.1 on GA media 2026-10-03T08:47:13.335284+00:00

nginx-1.31.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:20351 RHSA-2026:20351 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-03T08:47:13.335304+00:00

nginx: ngx_http_rewrite_module: code execution and denial of service nginx: NGINX: Authorization bypass via IP spoofing in HTTP/3 QUIC module nginx: ngx_http_v3_module: use-after-free issue leads to denial of service nginx: NGINX Open Source: Data injection via HTTP/2 proxy configuration

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-42926 Withdrawn: UBUNTU-CVE-2026-42926 2026-10-03T08:47:13.335325+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: nginx, Ubuntu:Pro:16.04:LTS: nginx, Ubuntu:Pro:18.04:LTS: nginx, Ubuntu:20.04:LTS: nginx, Ubuntu:22.04:LTS: nginx, Ubuntu:24.04:LTS: nginx, Ubuntu:25.10: nginx, Ubuntu:26.04:LTS: nginx

When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1527 WID-SEC-W-2026-1527 — NGINX Open Source and NGINX Plus: Mehrere Schwachstellen 2026-10-03T08:47:13.335355+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NGINX Open Source and NGINX Plus ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.