Vulnerability of the ngx_http_ssi_module module in NGINX Plus and NGINX Open Source servers, allowing attackers to modify memory contents of the worker process or cause service failures.

The ssi module in nginx plus and open source is vulnerable to use-after-free, enabling remote memory edits or service failures.

Reporter	Title	Published	Views	Family All 76
FreeBSD	Angie -- multiple vulnerabilities	17 Jul 202600:00	–	freebsd
FreeBSD	nginx -- multiple vulnerabilities	15 Jul 202600:00	–	freebsd
ATTACKERKB	CVE-2026-56434	15 Jul 202614:33	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : nginx, nginx-all-modules, nginx-core (ALAS2023-2026-2008)	4 Aug 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : nginx, --advisory ALAS2NGINX1-2026-015 (ALASNGINX1-2026-015)	4 Aug 202600:00	–	nessus
Tenable Nessus	Fedora 43 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-3b93aae2d6)	29 Jul 202600:00	–	nessus
Tenable Nessus	Fedora 44 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-60fc198d3b)	23 Jul 202600:00	–	nessus
Tenable Nessus	Fedora 45 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-d1cd8e3d25)	20 Jul 202600:00	–	nessus
Tenable Nessus	FreeBSD : Angie -- multiple vulnerabilities (347fe124-8f53-11f1-9f4f-3c7c3fba4204)	4 Aug 202600:00	–	nessus
Tenable Nessus	FreeBSD : nginx -- multiple vulnerabilities (56feeac6-8263-11f1-92ba-bc24110523fe)	18 Jul 202600:00	–	nessus

Vulners

Node

nginx nginx_plusRange37.0.0.1–37.0.3.1

nginx nginx_ingress_controllerRange2026-lts-r1–2026-lts-r4

Source	Link
my	www.my.f5.com/manage/s/article/K000162098
1275	www.1275.ru/vulnerability/vyshel-patch-dlya-nginx-tri-kriticheskie-uyazvimosti-zakryty-v-versiyah-1-30-4-i-1-31-3_32184
habr	www.habr.com/ru/news/1062096/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

04 Aug 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 26.1

CVSS 36.5

EPSS0.0045