CVE-2026-97629

Publication date 15 October 2026

Last updated 26 October 2026

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

6.5 · Medium

Score breakdown

Description

Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-deterministic manner that is beyond the attacker's control. An attacker could leverage this vulnerability to bypass verification of client certificates. Impact This vulnerability can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with access to sensitive information. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Read the notes from the security team

Status

Package Ubuntu Release Status
nginx 26.10 stonking
Fixed in 1.30.4-7ubuntu1.1
26.04 LTS resolute
Fixed in 1.28.3-2ubuntu1.12
24.04 LTS noble
Fixed in 1.24.0-2ubuntu7.19
22.04 LTS jammy
Not affected
20.04 LTS focal
Not affected
18.04 LTS bionic
Not affected
16.04 LTS xenial
Not affected
14.04 LTS trusty
Not affected

Notes

mdeslaur

introduced in 1.23.2 by: https://github.com/nginx/nginx/commit/1d572e359a210dcb27e5e073c016c1768c435263

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
nginx

Severity score breakdown

CVSS version:

Base score 8.3 · High

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Base score 6.5 · Medium

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

References

Related Ubuntu Security Notices (USN)

    • USN-8955-1
    • nginx vulnerabilities
    • 26 October 2026

Other references

Access our resources on patching vulnerabilities