Read the docs

Vinyl-Cache

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Vinyl-Cache records in CISA KEV

No Vinyl-Cache vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vinyl Cache 3 records MEDIUM

Records

4 records

TI-2026-26733 CVE-2026-34475 · GHSA-m9gq-cmcj-p62x

Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked…

Priority MEDIUM 41

Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0021 Published 2026-03-27 Partial fix · 6.0.17 LTS, 8.0.1 CWE-180
TI-2026-63202 CVE-2026-93894 · GHSA-pfj3-384h-g8q8

Out-of-bounds write in Vinyl-Cache Vinyl Cache

Priority LOW 12

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00358 Published 2026-09-18 Fixed in 9.0.2, 9.0.4 CWE-787
Open these records in search →