Advisories · Technology

Varnish-Software Varnish Cache.

Every CVE that names Varnish-Software Varnish Cache among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93894 CVE record

CVSS 2.3 Low

Out-of-bounds write in Vinyl-Cache Vinyl Cache and others
- Vinyl-Cache Vinyl Cache
- Varnish-Software Varnish Cache
- Memory corruption
Not analysed yet 18 Sept 2026
CVE-2026-40396 CVE record

CVSS 4.0 Medium

varnish-software Varnish Cache: Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon…
- varnish-software Varnish Cache
- CWE-670
Not analysed yet 12 Apr 2026
CVE-2026-40394 CVE record

CVSS 4.0 Medium

varnish-software Varnish Cache: Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace…
- varnish-software Varnish Cache
- CWE-670
Not analysed yet 12 Apr 2026
CVE-2026-34475 CVE record

CVSS 5.4 Medium

varnish-software Varnish Cache: Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12…
- varnish-software Varnish Cache
- CWE-180
Not analysed yet 27 Mar 2026
CVE-2025-47905 CVE record

CVSS 5.4 Medium

HTTP request smuggling in varnish-software Varnish Cache
- varnish-software Varnish Cache
- HTTP request smuggling
Not analysed yet 13 May 2025
CVE-2025-30346 CVE record

CVSS 5.4 Medium

HTTP request smuggling in varnish-software Varnish Cache
- varnish-software Varnish Cache
- HTTP request smuggling
Not analysed yet 21 Mar 2025