CVE-2025-23419

score

<0.1

cvss

4.3

epss

2.8%

published

2025-02-05

kev added

—

first seen

2026-10-21

Multiple server blocks sharing the same IP and port in nginx contain a session resumption vulnerability caused by improper handling of TLS session tickets and cache in default server with client certificate authentication, letting attackers bypass client cert requirements, exploit requires shared IP and port configuration.