6802 matches found
RHEL 8 : nginx:1.24 (RHSA-2026:6907)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6907 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage...
ROS-20260407-73-0041
A vulnerability in the TLS traffic proxying mechanism of NGINX Plus and NGINX OSS web servers is related to the loading of external unreliable data along with reliable data. Exploitation of the vulnerability could allow an attacker acting remotely to inject data in plain text form...
Important: nginx:1.24 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files CVE-2026-32647 NGINX: NGINX: Denial of Service or file...
ALSA-2026:6923 Important: nginx:1.24 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files CVE-2026-32647 NGINX: NGINX: Denial of Service or file...
CVE-2026-28755 affecting package nginx for versions less than 1.28.3-1
CVE-2026-28755 affecting package nginx for versions less than 1.28.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-27784 affecting package nginx for versions less than 1.28.3-1
CVE-2026-27784 affecting package nginx for versions less than 1.28.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-28753 affecting package nginx for versions less than 1.28.3-1
CVE-2026-28753 affecting package nginx for versions less than 1.28.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-27651 affecting package nginx for versions less than 1.28.3-1
CVE-2026-27651 affecting package nginx for versions less than 1.28.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-27654 affecting package nginx for versions less than 1.28.3-1
CVE-2026-27654 affecting package nginx for versions less than 1.28.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-32647 affecting package nginx for versions less than 1.28.3-1
CVE-2026-32647 affecting package nginx for versions less than 1.28.3-1. An upgraded version of the package is available that resolves this issue...
SUSE CVE-2026-33026
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This issue has been patched in version 2.3.4...
SUSE CVE-2026-33027
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui configuration improperly handles URL-encoded traversal sequences. When specially crafted paths are supplied, the backend resolves them to the base Nginx configuration directory and executes the operati...
SUSE CVE-2026-33028
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui application is vulnerable to a Race Condition. Due to the complete absence of synchronization mechanisms Mutex and non-atomic file writes, concurrent requests lead to the severe corruption of the prima...
SUSE CVE-2026-33029
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, an input validation vulnerability in the logrotate configuration allows an authenticated user to cause a complete Denial of Service DoS. By submitting a negative integer for the rotation interval, the backend enter...
SUSE CVE-2026-33030
Nginx UI is a web user interface for the Nginx web server. In versions 2.3.3 and prior, Nginx-UI contains an Insecure Direct Object Reference IDOR vulnerability that allows any authenticated user to access, modify, and delete resources belonging to other users. The application's base Model struct...
SUSE CVE-2026-33032
Nginx UI is a web user interface for the Nginx web server. In versions 2.3.5 and prior, the nginx-ui MCP Model Context Protocol integration exposes two HTTP endpoints: /mcp and /mcpmessage. While /mcp requires both IP whitelisting and authentication AuthRequired middleware, the /mcpmessage endpoi...
ROS-20260406-73-0001
A vulnerability in the ngxmailsmtp response header handler of NGINX Plus and NGINX Open Source web servers is related to a violation of the initial buffer boundary. Exploitation of the vulnerability could allow an attacker acting remotely to gain read access to the data...
RockyLinux 8 : nginx:1.24 (RLSA-2026:5581)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:5581 advisory. nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections CVE-2026-1642 Tenable has extracted the preceding description block directly...
