Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In some mod_ssl configurations on Apache HTTP Server 2.4.35 through to 2.4.63, an access control bypass by trusted clients is possible using TLS 1.3 session resumption. Configurations are affected when mod_ssl is configured for multiple virtual hosts, with each restricted to a different set of trusted client certificates (for example with a different SSLCACertificateFile/Path setting). In such a case, a client trusted to access one virtual host may be able to access another virtual host, if SSLStrictSNIVHostCheck is not enabled in either virtual host.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-18 | 1 | General1 |
| 2026-03-10 | 1 | Patch1 |
⚠️ Vulnerabilidades en productos Juniper Networks ❗ CVE-2025-32990 ❗ CVE-2025-32988 ❗ CVE-2025-23048 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-juniper-networks/ https://t.co/PWDTxfgcCA
Post summary
The post enumerates three Juniper Networks CVEs and links to a CERT page for further information, but it offers no technical details, exploits, or remediation guidance.
CVE-2023-38545 9.8 Critical CVE-2025-23048 9.1 Critical CVE-2025-55754 9.6 Critical HP Device Manager Vulnerability Update (5.0.16) | HP® Support https://support.hp.com/us-en/document/ish_14442335-14442364-16/hpsbhf04092
Post summary
HP released a device manager update addressing several high‑severity CVEs and provided a patch link.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | http_server | - | - | - |