9 matches found
CVE-2026-42533-Config-Scanner
nginx capture-clobber scanner A read-only static scanner that flags nginx configurations vulnerable to the complexvalue two-pass capture-clobbering bug class F5/nginx SIRT advisory, July 2026. It parses your config and reports the vulnerable pattern with the reason and location. It does not explo...
CVE-2026-42533-POC
CVE-2026-42533 Overflow del buffer heap e perdita di informazioni dall'heap pre-autenticazione in nginx, causati dalla mancata salvataggio/ripristino dello stato delle catture PCRE tra le due passate del motore degli script. Una variabile map basata su regex valutata tra due riferimenti di cattur...
CVE-2026-42533-nginx
CVE-2026-42533 nginx यह रिपॉजिटरी CVE-2026-42533 में वर्णित complexvalue two-pass capture-clobbering समस्या से जुड़े nginx कॉन्फ़िगरेशन पैटर्न की पहचान करने के लिए एक Go-आधारित स्कैनर शामिल करती है। अवलोकन यह टूल nginx कॉन्फ़िगरेशन फ़ाइलों और निर्देशिकाओं का विश्लेषण करता है ताकि उन जोखिम भरे...
USN-8563-3: nginx vulnerability
USN-8563-1 fixed vulnerabilities in nginx. The fix for CVE-2026-42533 was backed out in USN-8563-2 because it could cause a regression. This update includes a better fix for CVE-2026-42533. We apologize for the inconvenience. Original advisory details: It was discovered that nginx incorrectly...
TencentOS Server 4: nginx (TSSA-2026:0673)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0673 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
nginx 1.30.x < 1.30.4 / 1.31.2 < 1.31.3 Multiple Vulnerabilities
According to its Server response header, the installed version of nginx is 1.30.0 prior to 1.30.4, or 1.31.2 prior to 1.31.3. It is, therefore, affected by multiple vulnerabilities: - A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string...
nginx: NGINX: Arbitrary code execution via crafted HTTP requests
A flaw was found in NGINX. An unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP requests when the map directive uses regular expression regex matching and references regex capture variables before referencing the map output variable. This can lead to a heap...
CVE-2026-42533
A flaw was found in NGINX. An unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP requests when the map directive uses regular expression regex matching and references regex capture variables before referencing the map output variable. This can lead to a heap...
