https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T13:33:37.774171+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bit-nginx-2026-90439 BIT-nginx-2026-90439 — NGINX ngx_http_v3_module vulnerability 2026-09-28T13:33:37.801401+00:00

Affected: Bitnami: nginx

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions <= OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This can happen in a non-deterministic manner that is beyond the attacker's control. This may cause a heap buffer overflow in the NGINX worker process leading to a restart and/or limited data corruption.

Impact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or limited data corruption. There is no control plane exposure; this is a data plane issue only.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1182 certfr-2026-avi-1182 — Une vulnérabilité a été découverte dans F5 NGINX. Elle permet à un attaquant de provoquer un déni de service à distance… 2026-09-28T13:33:37.801657+00:00 certfr-2026-avi-1182 https://vulnerability.circl.lu/vuln/fkie_cve-2026-90439 fkie_cve-2026-90439 2026-09-28T13:33:37.801756+00:00

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions <= OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This can happen in a non-deterministic manner that is beyond the attacker's control. This may cause a heap buffer overflow in the NGINX worker process leading to a restart and/or limited data corruption.

Impact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or limited data corruption. There is no control plane exposure; this is a data plane issue only.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://vulnerability.circl.lu/vuln/ghsa-fjgw-pmcm-g7j7 GHSA-fjgw-pmcm-g7j7 2026-09-28T13:33:37.801893+00:00

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions <= OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This can happen in a non-deterministic manner that is beyond the attacker's control. This may cause a heap buffer overflow in the NGINX worker process leading to a restart and/or limited data corruption.

Impact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or limited data corruption. There is no control plane exposure; this is a data plane issue only.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11807-1 openSUSE-SU-2026:11807-1 — nginx-1.31.6-1.1 on GA media 2026-09-28T13:33:37.801993+00:00

nginx-1.31.6-1.1 on GA media

 https://vulnerability.circl.lu/vuln/rhsa-2026:67977 RHSA-2026:67977 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-09-28T13:33:37.802073+00:00

nginx: NGINX ngx_http_v3_module: Denial of Service via TLS handshake heap buffer overflow