CVE-2026-9256
šļøĀ 22 May 2026Ā 14:11:41Reported byĀ f5TypeĀ 
Ā cvešĀ web.nvd.nist.govš°ļøĀ 3Ā Media mentionsšĀ 576Ā Views
| Reporter | Title | Published | Views | Family All 243 |
|---|---|---|---|---|
 | nginx -- heap buffer overflow in ngx_http_rewrite_module | 22 May 202600:00 | ā | freebsd |
 | Exploit for Incorrect Authorization in F5 Nginx_Plus | 28 Jul 202607:29 | ā | githubexploit |
| Self-Researched-POC | 28 May 202606:56 | ā | githubexploit |
| Exploit for CVE-2026-9256 | 3 Jun 202602:17 | ā | githubexploit |
| Exploit for CVE-2026-9256 | 28 May 202608:22 | ā | githubexploit |
 | Security Bulletin:Vulnerability in NGINX affects IBM Netezza Appliance | 10 Aug 202609:39 | ā | ibm |
 | CVE-2026-9256 | 22 May 202614:11 | ā | attackerkb |
 | Amazon Linux 2023 : nginx, nginx-all-modules, nginx-core (ALAS2023-2026-1773) | 8 Jun 202600:00 | ā | nessus |
| Amazon Linux 2 : nginx, --advisory ALAS2NGINX1-2026-013 (ALASNGINX1-2026-013) | 8 Jun 202600:00 | ā | nessus |
| AlmaLinux 9 : nginx:1.24 (ALSA-2026:28212) | 26 Jun 202600:00 | ā | nessus |
10
Node
OR
Node
OR
Node
OR
[
{
"vendor": "F5",
"product": "NGINX Plus",
"modules": [
"ngx_http_rewrite_module"
],
"versions": [
{
"status": "affected",
"version": "37.0",
"lessThan": "37.0.1.1",
"versionType": "custom"
},
{
"status": "affected",
"version": "R36",
"lessThan": "R36 P5",
"versionType": "custom"
},
{
"status": "affected",
"version": "R32",
"lessThan": "R32 P7",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "F5",
"product": "NGINX Open Source",
"modules": [
"ngx_http_rewrite_module"
],
"versions": [
{
"status": "affected",
"version": "1.31.0",
"lessThan": "1.31.1",
"versionType": "custom"
},
{
"status": "affected",
"version": "1.30.0",
"lessThan": "1.30.2",
"versionType": "custom"
},
{
"status": "affected",
"version": "0.1.17",
"lessThanOrEqual": "0.9.7",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
]10
Data
Build on a solid foundation withĀ Vulners data
WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data
Api
Power your application withĀ Vulners API
The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access
App
Assess and manage vulnerabilities withĀ VulnersĀ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
25 Aug 2026 13:19Current
7.7High risk
Vulners AI Score7.7
CVSS 3.18.1
CVSS 49.2
EPSS0.10856
SSVC