Vendor

varnish-software

10 known vulnerabilities.

Products

Varnish Cache 7 Varnish Enterprise 3 Varnish Cache by Varnish Software 1

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

Medium 4.0

CVE-2026-40396

Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger. A mal…

varnish-software Varnish Cache varnish Ubuntu

Apr 12, 2026
Medium 4.0

CVE-2026-40395

Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL. The …

varnish-software Varnish Enterprise varnish Ubuntu

Apr 12, 2026
Medium 4.0

CVE-2026-40394

Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (d…

varnish-software Varnish Cache varnish Ubuntu

Apr 12, 2026
Medium 5.4

CVE-2026-34475

Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle U…

varnish-software Varnish Cache varnish varnish Debian Ubuntu

Mar 27, 2026
Medium 5.4

CVE-2025-47905

Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via …

varnish-software Varnish Cache varnish varnish Debian Ubuntu Alpine

May 13, 2025
Medium 4.0

CVE-2025-30347

Varnish Enterprise before 6.0.13r13 allows remote attackers to obtain sensitive information via an out-of-bounds read f…

varnish-software Varnish Enterprise

Mar 21, 2025
Medium 5.4

CVE-2025-30346

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.

varnish-software Varnish Cache varnish varnish Debian Ubuntu Alpine

Mar 21, 2025