CERT24CVE-2026-97629 — NGINX ngx_http_ssl_module vulnerabilityLoading data…

CVE-2026-97629 — NGINX ngx_http_ssl_module vulnerability

A vulnerability in NGINX Plus or NGINX Open Source may allow a remote unauthenticated attacker, under a specific SSL session ticket key configuration, to forge client SSL sessions and bypass client certificate verification.

← Back to intelligence

CVE-2026-97629 — NGINX ngx_http_ssl_module vulnerability

A vulnerability in NGINX Plus or NGINX Open Source may allow a remote unauthenticated attacker, under a specific SSL session ticket key configuration, to forge client SSL sessions and bypass client certificate verification.