{"schema":"vulnpedia.research/1","cve":"CVE-2026-34475","references":[{"url":"https://vinyl-cache.org/security/VSV00018.html","tags":["Mitigation","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"mitre","modified":"2026-03-27T19:47:58.919Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2026-03-27T19:47:58.919Z","url":"https://vinyl-cache.org/security/VSV00018.html"},{"source":"nvd","sourceId":"CVE-2026-34475","modified":"2026-06-17T10:39:06.377","url":"https://vinyl-cache.org/security/VSV00018.html"},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://vinyl-cache.org/security/VSV00018.html"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34475","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-34475"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2452408","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2452408"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34475","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-34475"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34475","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34475"}]},{"source":"euvd","sourceId":"EUVD-2026-16801","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-16801","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-16801","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-16801"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_10:varnish","product":"varnish as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/varnish","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_10:varnish-devel","product":"varnish-devel as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/varnish-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_10:varnish-docs","product":"varnish-docs as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/varnish-docs","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_10:varnish-modules.src","product":"varnish-modules.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/varnish-modules?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_10:varnish.src","product":"varnish.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/varnish?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_8:varnish-devel::varnish:6","product":"varnish-devel (varnish:6) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/varnish-devel?rpmmod=varnish:6","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_8:varnish-docs::varnish:6","product":"varnish-docs (varnish:6) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/varnish-docs?rpmmod=varnish:6","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_8:varnish-modules.src::varnish:6","product":"varnish-modules.src (varnish:6) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/varnish-modules?arch=src&rpmmod=varnish:6","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_8:varnish-modules::varnish:6","product":"varnish-modules (varnish:6) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/varnish-modules?rpmmod=varnish:6","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_8:varnish.src::varnish:6","product":"varnish.src (varnish:6) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/varnish?arch=src&rpmmod=varnish:6","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_8:varnish::varnish:6","product":"varnish (varnish:6) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/varnish?rpmmod=varnish:6","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_9:varnish-modules.src","product":"varnish-modules.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/varnish-modules?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_10:redhat-user-workloads/varnish-7-10-0","product":"redhat-user-workloads/varnish-7-10-0 as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/rhel-10-0/varnish-7-10-0/varnish-7-10-0?repository_url=quay.io/redhat-user-workloads/osci-rhel-containers-tenant/rhel-10-0/varnish-7-10-0/varnish-7-10-0","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_10:redhat-user-workloads/varnish-7-10-1","product":"redhat-user-workloads/varnish-7-10-1 as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/rhel-10-1/varnish-7-10-1/varnish-7-10-1?repository_url=quay.io/redhat-user-workloads/osci-rhel-containers-tenant/rhel-10-1/varnish-7-10-1/varnish-7-10-1","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_8:redhat-user-workloads/varnish-6-8-10","product":"redhat-user-workloads/varnish-6-8-10 as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/varnish-6-8-10/varnish-6-8-10?repository_url=quay.io/redhat-user-workloads/osci-rhel-containers-tenant/varnish-6-8-10/varnish-6-8-10","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_9:redhat-user-workloads/varnish-6-9-6","product":"redhat-user-workloads/varnish-6-9-6 as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/rhel-9-6/varnish-6-9-6/varnish-6-9-6?repository_url=quay.io/redhat-user-workloads/osci-rhel-containers-tenant/rhel-9-6/varnish-6-9-6/varnish-6-9-6","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_9:redhat-user-workloads/varnish-6-9-7","product":"redhat-user-workloads/varnish-6-9-7 as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/rhel-9-7/varnish-6-9-7/varnish-6-9-7?repository_url=quay.io/redhat-user-workloads/osci-rhel-containers-tenant/rhel-9-7/varnish-6-9-7/varnish-6-9-7","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_9:varnish","product":"varnish as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/varnish","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_9:varnish-devel","product":"varnish-devel as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/varnish-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_9:varnish-docs","product":"varnish-docs as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/varnish-docs","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]},{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json","productId":"red_hat_enterprise_linux_9:varnish.src","product":"varnish.src as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/varnish?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-34475","modified":"2026-06-30T11:42:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34475.json"}]}],"vendorCoverage":{"total":21,"shown":21,"omitted":0,"source":"redhat"}}