Lucene search
+L

Vulnerability of the ngx_http_ssi_module module in NGINX Plus and NGINX Open Source servers, allowing attackers to modify memory contents of the worker process or cause service failures.

🗓️ 24 Jul 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 2 Views

The ssi module in nginx plus and open source is vulnerable to use-after-free, enabling remote memory edits or service failures.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
FreeBSD
nginx -- multiple vulnerabilities
15 Jul 202600:00
freebsd
ATTACKERKB
CVE-2026-56434
15 Jul 202614:33
attackerkb
AlpineLinux
CVE-2026-56434
15 Jul 202614:33
alpinelinux
CBLMariner
CVE-2026-56434 affecting package nginx for versions less than 1.28.3-8
22 Jul 202622:06
cbl_mariner
Chainguard
CVE-2026-56434 vulnerabilities
22 Jul 202614:17
cgr
Circl
CVE-2026-56434
15 Jul 202616:59
circl
CVE
CVE-2026-56434
15 Jul 202614:33
cve
Cvelist
CVE-2026-56434 NGINX ngx_http_ssi_module vulnerability
15 Jul 202614:33
cvelist
Debian CVE
CVE-2026-56434
15 Jul 202614:33
debiancve
EUVD
EUVD-2026-44684
15 Jul 202614:33
euvd
Rows per page
Vulners
Node
OR
nginxnginx_gateway_fabricRange1.3.01.6.2
nginxnginx_app_protect_wafRange5.2.05.8.0
nginxnginx_plusRange37.0.0.137.0.3.1
nginxnginx_open_sourceRange1.31.21.31.3
nginxnginx_open_sourceRange1.30.01.30.4
nginxnginx_instance_managerRange2.17.02.22.1
nginxf5_waf_for_nginxRange5.9.05.13.3
nginxnginx_app_protect_wafRange4.11.04.16.0
nginxnginx_gateway_fabricRange2.0.02.6.7
nginxnginx_ingress_controllerRange2026-lts-r12026-lts-r4

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

24 Jul 2026 00:00Current
5.9Medium risk
Vulners AI Score5.9
CVSS 26.1
CVSS 36.5
EPSS0.0045
2