nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections

A flaw was found in NGINX. When NGINX is configured to proxy to upstream Transport Layer Security TLS servers, An attacker with a man-in-the-middle MITM position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response...

nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections

A flaw was found in NGINX. When NGINX is configured to proxy to upstream Transport Layer Security TLS servers, An attacker with a man-in-the-middle MITM position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response...

nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections

A flaw was found in NGINX. When NGINX is configured to proxy to upstream Transport Layer Security TLS servers, An attacker with a man-in-the-middle MITM position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response...

OESA-2026-1572 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker with a man-in-the-middle MI...

CLSA-2026-1773137907 nginx: Fix of CVE-2026-1642

CVE-2026-1642: fix upstream TLS proxy vulnerability allowing MITM inject plaintext into proxied responses; enforce strict upstream TLS verification and reject injected plaintext...

BIT-NGINX-GATEWAY-2026-1642 NGINX vulnerability

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker with a man-in-the-middle MITM position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data in...

AZL-76706 CVE-2026-1642 affecting package nginx for versions less than 1.28.2-1

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker with a man-in-the-middle MITM position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data in...

CVE-2026-1642 NGINX vulnerability

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker with a man-in-the-middle MITM position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data in...

EUVD-2026-5498

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker with a man-in-the-middle MITM position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data in...

CVE-2026-1642 NGINX vulnerability

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker with a man-in-the-middle MITM position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data in...

Virtuozzo Linux Errata and Security Advisory 2020:5020 Low

Upstream security update. Follow RHSA-2020:5020 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2020:5047

Upstream security update. Follow RHBA-2020:5047 for details...

Virtuozzo Linux Errata and Security Advisory 2019:4024 Important

Upstream security update. Follow RHSA-2019:4024 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:3977

Upstream security update. Follow RHBA-2019:3977 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:3972

Upstream security update. Follow RHBA-2019:3972 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:3068

Upstream security update. Follow RHBA-2019:3068 for details...

Virtuozzo Linux Errata and Security Advisory 2019:1228 Important

Upstream security update. Follow RHSA-2019:1228 for details...

Virtuozzo Linux Errata and Enhancement Advisory 2017:3052

Upstream security update. Follow RHEA-2017:3052 for details...

Virtuozzo Linux Errata and Security Advisory 2017:2771 Important

Upstream security update. Follow RHSA-2017:2771 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:1726

Upstream security update. Follow RHBA-2017-1726 for details...