CVE-2026-56584 HCL IEM was affected with the Information disclosure nginx server

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...

CVE-2026-56584 HCL IEM was affected with the Information disclosure nginx server

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...

EUVD-2026-46273

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...

Exploit for Heap-based Buffer Overflow in F5 Nginx_Plus

CVE-2026-27654 – nginx ngxhttpdavmodule DAV Alias Path Hand...

Exploit for Heap-based Buffer Overflow in F5 Nginx_Plus

CVE-2026-27654 – nginx ngxhttpdavmodule DAV Alias Path Hand...

CLEANSTART-2026-WT22902 Security fixes for CVE-2026-27145, CVE-2026-39822, CVE-2026-42504, CVE-2026-42505, CVE-2026-42507, CVE-2026-46600, CVE-2026-56852 applied in versions: 1.15.1-r2, 1.15.1-r3

Multiple security vulnerabilities affect the ingress-nginx-controller-1.15 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LN45890 Security fixes for CVE-2024-55549, CVE-2025-24855, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-41080, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-45186, CVE-2026-46600, CVE-2026-56852 applied in versions: 1.14.5-r1, 1.14.5-r2, 1.14.5-r3

Multiple security vulnerabilities affect the ingress-nginx-controller-1.14 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OM32721 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-41080, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-45186, CVE-2026-46600, CVE-2026-56852 applied in versions: 1.13.9-r0, 1.14.5-r1, 1.14.5-r2

Multiple security vulnerabilities affect the ingress-nginx-controller-1.13 package. These issues are resolved in later releases. See references for individual vulnerability details...

nginx security update

1.26.3-6.0.1.el102.5 - Reference oracle-indexhtml within Requires Orabug: 33802044 2:1.26.3-6.5 - Resolves: RHEL-191778 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer...

PT-2026-61946

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...

Oracle Linux 10 : nginx (ELSA-2026-36364)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36364 advisory. - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-420...

CVE-2026-56584: Exposure of Sensitive Information to an Unauthorized Actor

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...

USN-8563-2 nginx regression

USN-8563-1 fixed vulnerabilities in nginx. One of the fixes introduced ABI changes that could cause issues with external modules. This update reverts the fix for CVE-2026-42533 pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that ngi...

USN-8563-2: nginx regression

USN-8563-1 fixed vulnerabilities in nginx. One of the fixes introduced ABI changes that could cause issues with external modules. This update reverts the fix for CVE-2026-42533 pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that ngi...

BIT-NGINX-GATEWAY-2026-60005 NGINX ngx_http_slice_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX...

BIT-NGINX-GATEWAY-2026-56434 NGINX ngx_http_ssi_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpssimodule module. This vulnerability may exist when the Server-Side Includes SSI, proxypass, and proxybuffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle MITM abili...

BIT-NGINX-2026-56434 NGINX ngx_http_ssi_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpssimodule module. This vulnerability may exist when the Server-Side Includes SSI, proxypass, and proxybuffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle MITM abili...

BIT-NGINX-GATEWAY-2026-42533 NGINX Map directive and Regex matching vulnerability

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

BIT-NGINX-2026-42533 NGINX Map directive and Regex matching vulnerability

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

BIT-NGINX-AGENT-2026-60062 NGINX Agent Vulnerability

The NGINX Agent configdirs directive allows a low-privileged attacker to gain limited read and write access to files outside of the designated secure directory. The configdirs directive required for this issue can also be configured through NGINX Instance Manager. A successful exploit may allow a...