varnish software
Security Risk Profile
47
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 25 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 15, 2018 to present
25
Total CVEs
4
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
8.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
47/100
medium
Severity Distribution
Critical
1High
3Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. Varnish-software Varnish Enterprise35
2. Varnish Software Varnish18
3. Varnish Software Varnish Cache6
4. Vinyl-cache Vinyl Cache3
5. Varnish Software Varnish Enterprise3
Recent Vulnerabilities
See more →https://seclists.org/oss-sec/2026/q3/8
unknown
Vinyl Cache / Varnish Cache HTTP/2 parsing deficiency [CVE-2026-50052]
7/1/2026🔧 No Patch
CVE-2026-40396
CVSS 7.5high
4/12/2026🔧 No Patch
CVE-2026-40395
CVSS 7.5high
4/12/2026🔧 No Patch
CVE-2026-40394
CVSS 7.5high
4/12/2026🔧 No Patch
CVE-2026-34475
CVSS 9.8EPSS 0%critical
3/27/2026🔧 No Patch
EOL-varnish-8.0
unknown
9/15/2025
https://seclists.org/oss-sec/2025/q2/131
unknown
VSV00016: Varnish Cache 6.0, 7.6, 7.7 - quest Smuggling Attack
5/13/2025🔧 No Patch
https://seclists.org/oss-sec/2025/q2/127
unknown
VSV00016: Varnish Cache 6.0, 7.6, 7.7 - quest Smuggling Attack
5/13/2025🔧 No Patch
EOL-varnish-7.7
unknown
3/17/2025
EOL-varnish-7.6
unknown
9/13/2024
Monitor varnish software in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.