{"schema":"vulnpedia.research/1","cve":"CVE-2026-97629","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162606","tags":["vendor-advisory","vendor-reference"],"source":"mitre","sourceId":"f5","modified":"2026-10-14T14:40:26.740Z","origins":[{"source":"mitre","sourceId":"f5","modified":"2026-10-14T14:40:26.740Z","url":"https://my.f5.com/manage/s/article/K000162606"},{"source":"nvd","sourceId":"CVE-2026-97629","modified":"2026-10-15T17:17:33.410","url":"https://my.f5.com/manage/s/article/K000162606"},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://my.f5.com/manage/s/article/K000162606"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-97629","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-97629"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552364","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552364"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-97629","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-97629"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97629","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97629"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:83427","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://access.redhat.com/errata/RHSA-2026:83427"}]},{"source":"euvd","sourceId":"EUVD-2026-101113","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101113","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101113","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101113"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/PhiNode-Labs/nginx-cve-2026-97629","source":"poc-in-github","sourceId":"CVE-2026-97629","description":"CVE-2026-97629 — nginx TLS session-ticket forgery that can bypass client-certificate (mTLS) authentication. Root cause, one-line patch, proof-of-concept exploit and reproduction evidence. Found and disclosed by PhiNode Labs; credited by F5. Fixed in nginx 1.31.7 / 1.30.6.","modified":"2026-10-21T20:30:33Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-97629","url":"https://github.com/PhiNode-Labs/nginx-cve-2026-97629"},{"source":"poc-in-github","sourceId":"CVE-2026-97629","modified":"2026-10-21T20:30:33Z","url":"https://github.com/PhiNode-Labs/nginx-cve-2026-97629"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64","product":"nginx-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@s390x","product":"nginx-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src","product":"nginx-0:1.30.6-1.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx@1.30.6-1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms","product":"nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-all-modules@1.30.6-1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms","product":"nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-all-modules@1.30.6-1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms","product":"nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-all-modules@1.30.6-1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64","product":"nginx-core-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-core@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@s390x","product":"nginx-core-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-core@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms","product":"nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-filesystem@1.30.6-1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms","product":"nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-filesystem@1.30.6-1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms","product":"nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-filesystem@1.30.6-1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@aarch64","product":"nginx-mod-devel-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-devel@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x","product":"nginx-mod-devel-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-devel@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64","product":"nginx-mod-http-geoip-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-http-geoip@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x","product":"nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-http-geoip@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64","product":"nginx-mod-http-geoip-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-http-geoip@1.30.6-1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64","product":"nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-http-image-filter@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x","product":"nginx-mod-http-image-filter-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-http-image-filter@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64","product":"nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-http-perl@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@s390x","product":"nginx-mod-http-perl-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-http-perl@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64","product":"nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-http-perl@1.30.6-1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64","product":"nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x","product":"nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@aarch64","product":"nginx-mod-mail-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-mail@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x","product":"nginx-mod-mail-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-mail@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@x86_64","product":"nginx-mod-mail-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-mail@1.30.6-1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64","product":"nginx-mod-stream-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-stream@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@s390x","product":"nginx-mod-stream-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-stream@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64","product":"nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-stream-geoip@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x","product":"nginx-mod-stream-geoip-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-stream-geoip@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64","product":"nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"}],"purl":"pkg:rpm/redhat/nginx-mod-stream-geoip@1.30.6-1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]},{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json","productId":"red_hat_hardened_images:php.src","product":"php.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/php@8.5.11-2.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-97629","modified":"2026-10-20T04:11:11+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97629.json"}]}],"vendorCoverage":{"total":38,"shown":32,"omitted":6,"source":"redhat"}}