211 matches found
nginx-cve-2026-42945
CVE-2026-42945 NGINX Rift — защитный сканер Организации, использующие NGINX Open Source , NGINX Plus или ingress/контроллеры на базе NGINX, должны проверить, затронуты ли они уязвимостью CVE-2026-42945, и установить исправления или перенастроить до того, как попытки эксплуатации достигнут...
ROS-20260810-73-0013
The vulnerabilities of the ngxhttpproxyv2module and ngxhttpgrpcmodule modules in NGINX Plus and NGINX Open Source web servers are related to the execution of operations outside of the buffer in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause...
Important: nginx
Issue Overview: A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...
ROS-20260803-73-0011
The vulnerability of the ngxhttpssimodule module in NGINX Plus and NGINX Open Source HTTP servers relates to the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to modify the memory contents of the working process or cause service failures...
Exploit for Incorrect Authorization in F5 Nginx_Plus
🛡️ NGINX 2026 Multi-CVE CTI Investigation CVE-2026-28755...
PT-2026-65034
NGINX Plus and NGINX Open Source have a vulnerability in the ngx http proxy v2 module and ngx http grpc module modules. This vulnerability exists when the proxy http version to 2 or grpc pass directives are used to proxy HTTP/2 traffic, the ignore invalid headers directive is set to off, and the...
Vulnerability of the ngx_http_slice_module in NGINX Plus and NGINX Open Source servers, allowing attackers to expose protected information or cause service failures.
The vulnerability of the ngxhttpslicemodule in NGINX Plus and NGINX Open Source is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...
GHSA-VXCV-H5WJ-JXR5 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline, commercial-nginx-plus...
GHSA-FXFG-V4RJ-HP95 vulnerabilities
Vulnerabilities for packages: commercial-nginx-plus, ingress-nginx-controller-fips, nginx-stable, nginx-mainline, ingress-nginx-controller...
CVE-2026-60005 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline, commercial-nginx-plus...
CVE-2026-42533 vulnerabilities
Vulnerabilities for packages: commercial-nginx-plus, ingress-nginx-controller-fips, nginx-stable, nginx-mainline, ingress-nginx-controller...
GHSA-M73P-XG7Q-M8F2 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline, commercial-nginx-plus...
CVE-2026-56434 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline, commercial-nginx-plus...
SUSE CVE-2026-56434
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpssimodule module. This vulnerability may exist when the Server-Side Includes SSI, proxypass, and proxybuffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle MITM abili...
UBUNTU-CVE-2026-42533
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
UBUNTU-CVE-2026-60005
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX...
UBUNTU-CVE-2026-56434
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpssimodule module. This vulnerability may exist when the Server-Side Includes SSI, proxypass, and proxybuffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle MITM abili...
CVE-2026-60065
When NGINX Plus is configured to use the Message Queuing Telemetry Transport MQTT filter module ngxstreammqttfiltermodule, unauthenticated attackers can send requests with conditions beyond the attacker's control to cause a heap buffer over-read in the NGINX worker process, leading to a restart...
CVE-2026-42533
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
CVE-2026-60005
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX...