CVE-2026-97629

The ngx_http_ssl_module in NGINX Plus , NGINX Open Source , and related F5 products (such as NGINX Instance Manager , F5 WAF for NGINX , and NGINX Gateway Fabric ) is vulnerable to a session forgery flaw. When configured with ssl_session_cache shared:name:size without an explicit ssl_session_tick...

Improper Certificate Validation

vault is vulnerable to Improper Certificate Validation. The vulnerability exists due to insufficient validation of URI subject alternative names which allows an attacker to bypass the certificate subject verification...