Read the docs
TI-2026-74063 Aliases CVE-2026-97629GHSA-qhwc-5g9q-3669

Forged SSL sessions in NGINX let attackers bypass client certificates

Priority LOW 36CWE-908Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
High · Low · None
Fix status
Partial Red Hat: 1 fixed, 3 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat.

Summary

F5 NGINX Plus (from 37.0.0 before 37.0.5.1, from 37.1.0 before 37.1.0.1) and NGINX Open Source (from 1.30.0 before 1.30.6, from 1.31.0 before 1.31.7) are affected. When ssl_session_cache is set without an explicit ssl_session_ticket_key file, the session ticket keys are uninitialized (CWE-908). A remote unauthenticated attacker can forge client SSL sessions in a way they do not control, bypassing client certificate verification.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-deterministic manner that is beyond the attacker's control. An attacker could leverage this vulnerability to bypass verification of client certificates. Impact This vulnerability can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with access to sensitive information. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00246 15th percentileScored 2026-11-07
Fix Partial NGINX Plus (F5): 37.1.0.1, 37.0.5.1NGINX Open Source (F5): 1.31.7, 1.30.6Red Hat: 1 advisoryRed Hat: 1 fixed, 3 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
F5NGINX Plus37.1.0 to before 37.1.0.1; 37.0.0 to before 37.0.5.1; R36 and later; R35 and later; R34 and later; R33 and later37.1.0.1, 37.0.5.1Patch availableCNA
F5NGINX Open Source1.31.0 to before 1.31.7; 1.30.0 to before 1.30.6; 1.23.3 and later1.31.7, 1.30.6Patch availableCNA
  • NGINX Plus VendorF5 Affected 37.1.0 to before 37.1.0.1; 37.0.0 to before 37.0.5.1; R36 and later; R35 and later; R34 and later; R33 and later Fixed in 37.1.0.1, 37.0.5.1 Patch available CNA
  • NGINX Open Source VendorF5 Affected 1.31.0 to before 1.31.7; 1.30.0 to before 1.30.6; 1.23.3 and later Fixed in 1.31.7, 1.30.6 Patch available CNA

Remediation

Fixed versions are NGINX Plus 37.0.5.1 and 37.1.0.1, and NGINX Open Source 1.30.6 and 1.31.7. Red Hat fixes Red Hat Hardened Images in RHSA-2026:83427. The sources list no fixed version for Red Hat Enterprise Linux 8, 9 and 10.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA NGINX Plus (F5) Fixed in 37.1.0.1, 37.0.5.1
  • Fix · CNA NGINX Open Source (F5) Fixed in 1.31.7, 1.30.6

Red Hat 1 advisory

  • RHSA-2026:83427 Released 2026-10-15 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images nginx-1.30.6-1.hum1@aarch64, nginx-1.30.6-1.hum1@s390x, nginx-1.30.6-1.hum1@src +34

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    F5 NGINX Open Source 1.30.6, 1.31.7

    5 records Highest priority Priority MEDIUM 3 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2026-74056 Heap buffer overflow in NGINX map directive regex matchingPriority MEDIUM 44
    • TI-2026-73990 Heap buffer overflow in NGINX alias and rewrite handlingPriority MEDIUM 44
    • TI-2026-74062 Use-after-free in NGINX ngx_http_core_module can crash workersPriority MEDIUM 43
    Show all 5 records →
  • Release ·

    F5 NGINX Plus 37.0.5.1, 37.1.0.1

    4 records Highest priority Priority MEDIUM 3 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2026-74056 Heap buffer overflow in NGINX map directive regex matchingPriority MEDIUM 44
    • TI-2026-73990 Heap buffer overflow in NGINX alias and rewrite handlingPriority MEDIUM 44
    • TI-2026-74062 Use-after-free in NGINX ngx_http_core_module can crash workersPriority MEDIUM 43
    Show all 4 records →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 10AffectedNo fix yet: Fix deferred
Red Hat Enterprise Linux 8AffectedNo fix yet: Fix deferred
Red Hat Enterprise Linux 9AffectedNo fix yet: Fix deferred
Red Hat Hardened ImagesFixed RHSA-2026:83427
Not affected: 2 products
  • Red Hat Enterprise Linux 9
  • Red Hat Hardened Images

Timeline

  1. 2026-10-14 Threatist record created from CVE-2026-97629
  2. 2026-10-14 Alias added: GHSA-qhwc-5g9q-3669
  3. 2026-10-16 CISA SSVC decision points changed
  4. 2026-10-16 Priority changed: MEDIUM → LOW
  5. 2026-10-20 Fix available: RHSA-2026:83427 · Red Hat
  6. 2026-10-20 Fix available: Red Hat Hardened Images · Red Hat
  7. 2026-10-20 CVSS score added · Red Hat
  8. 2026-10-26 Affected versions changed · Red Hat

References

Advisory 1

  • TI-2023-25230 BIG-IP Configuration utility unauthenticated remote code execution vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-01269 Missing authentication in F5 BIG-IP KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-05850 Memory corruption in BIG-IP KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-05845 Server-side request forgery in BIG-IP; BIG-IQ KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-04820 Path traversal in BIG-IP KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
See all 1057 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences