Login Request a demo
VE
Product
Varnish Enterprise
by varnish-software · last CVE Apr 12, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 4Medium 2Low 0
Severity
All severities7Critical1High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Varnish Enterprise to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40395
7.5
0%
Apr 12
Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL
Affected: 6.0.9r5 before 6.0.16r12
CVE-2026-40394
7.5
0%
Apr 12
Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amounts of prefetched data
Affected: through 6.0.15; 6.0.16; 6.0.16; 6.0.16; 6.0.16; 6.0.16; +5 more
CVE-2025-8671
7.5
4%
Aug 13
No description published yet
Affected: 6.0.x through 6.0.14r4
CVE-2025-30347
7.5
0%
Mar 21
Varnish Enterprise before 6.0.13r13 allows remote attackers to obtain sensitive information via an out-of-bounds read for range requests on ephemeral MSE4 stevedore objects
Affected: 6 before 6.0.13r13
Showing 4