CVE record · 2 sources
CVE-2026-93894
In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL.
- Vendor
- Debian
- Product
- Squid / HAProxy / Varnish
- EPSS
- 0.004 (p30)
- Exposure class
- Edge / VPN / firewall
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
varnish - security update
Several vulnerabilities were discovered in Varnish Cache, an HTTP accelerator, which could result in cache poisoning, authentication bypass or denial of service. CVE-2026-34475 Tom Kinnaird discovered a deficiency in the parsing…
-
In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL.
In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL. This can be used as a remote denial of service (DoS) vector to make the child process…