https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:02:55.743062+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-04821 bdu:2026-04821 2026-10-02T11:02:55.821444+00:00 bdu:2026-04821 https://cve.radiocsirt.org/vuln/bell-cve-2026-28755 BELL-CVE-2026-28755 2026-10-02T11:02:55.821480+00:00

Affected: Alpaquita:23: nginx, Alpaquita:25: nginx, Alpaquita:stream: nginx

 https://cve.radiocsirt.org/vuln/bit-nginx-2026-28755 BIT-nginx-2026-28755 — NGINX ngx_stream_ssl_module vulnerability 2026-10-02T11:02:55.821510+00:00

Affected: Bitnami: nginx

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the ssl_verify_client on and ssl_ocsp on directives, allowing the TLS handshake to succeed even after an OCSP check identifies the certificate as revoked.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0352 certfr-2026-avi-0352 — De multiples vulnérabilités ont été découvertes dans les produits F5. Certaines d'entre elles permettent à un attaquant… 2026-10-02T11:02:55.821537+00:00 certfr-2026-avi-0352 https://cve.radiocsirt.org/vuln/euvd-2026-277196 EUVD-2026-277196 2026-10-02T11:02:55.821553+00:00 EUVD-2026-277196 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28755 fkie_cve-2026-28755 2026-10-02T11:02:55.821564+00:00

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the ssl_verify_client on and ssl_ocsp on directives, allowing the TLS handshake to succeed even after an OCSP check identifies the certificate as revoked.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/ghsa-hgfr-jmpr-2p89 GHSA-hgfr-jmpr-2p89 2026-10-02T11:02:55.821587+00:00

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the ssl_verify_client on and ssl_ocsp on directives, allowing the TLS handshake to succeed even after an OCSP check identifies the certificate as revoked.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-28755 msrc_CVE-2026-28755 — NGINX ngx_stream_ssl_module vulnerability 2026-10-02T11:02:55.821603+00:00 msrc_CVE-2026-28755 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10423-1 openSUSE-SU-2026:10423-1 — nginx-1.29.7-1.1 on GA media 2026-10-02T11:02:55.821619+00:00

nginx-1.29.7-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:8346 RHSA-2026:8346 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T11:02:55.821637+00:00

nginx: NGINX ngx_mail_smtp_module vulnerability nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file NGINX: NGINX Plus: NGINX Open Source: NGINX Plus and NGINX Open Source: Request manipulation via header injection in SMTP upstream requests NGINX: NGINX: Certificate revocation bypass when OCSP is enabled nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files

 https://cve.radiocsirt.org/vuln/suse-su-2026:21823-1 SUSE-SU-2026:21823-1 — Security update for nginx 2026-10-02T11:02:55.821662+00:00

Security update for nginx

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-28755 UBUNTU-CVE-2026-28755 2026-10-02T11:02:55.821678+00:00

Affected: Ubuntu:24.04:LTS: nginx, Ubuntu:25.10: nginx

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the ssl_verify_client on and ssl_ocsp on directives, allowing the TLS handshake to succeed even after an OCSP check identifies the certificate as revoked. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0860 WID-SEC-W-2026-0860 — NGINX und NGINX Plus: Mehrere Schwachstellen 2026-10-02T11:02:55.821700+00:00

Ein Angreifer kann mehrere Schwachstellen in NGINX Plus und NGINX ausnutzen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, und potenziell um beliebigen Programmcode auszuführen.