https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:40:35.315544+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-09782 bdu:2026-09782 2026-10-03T11:40:35.435636+00:00 bdu:2026-09782 https://cve.radiocsirt.org/vuln/bell-cve-2026-8711 BELL-CVE-2026-8711 2026-10-03T11:40:35.435718+00:00

Affected: Alpaquita:25: nginx, Alpaquita:stream: nginx

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0619 certfr-2026-avi-0619 — Une vulnérabilité a été découverte dans F5 NGINX. Elle permet à un attaquant de provoquer une exécution de code arbitra… 2026-10-03T11:40:35.435758+00:00 certfr-2026-avi-0619 https://cve.radiocsirt.org/vuln/euvd-2026-319932 EUVD-2026-319932 2026-10-03T11:40:35.435791+00:00 EUVD-2026-319932 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8711 fkie_cve-2026-8711 2026-10-03T11:40:35.435803+00:00

NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*, $cookie_*) and a location invoking the ngx.fetch() operation from NGINX JavaScript. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/ghsa-pj32-6rxc-gcmq GHSA-pj32-6rxc-gcmq 2026-10-03T11:40:35.435833+00:00

NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*, $cookie_*) and a location invoking the ngx.fetch() operation from NGINX JavaScript. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, for systems with Address Space Layout Randomization (ASLR) disabled, code execution is possible.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-8711 msrc_CVE-2026-8711 — NGINX JavaScript vulnerability 2026-10-03T11:40:35.435852+00:00 msrc_CVE-2026-8711 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-8711 UBUNTU-CVE-2026-8711 2026-10-03T11:40:35.435868+00:00

Affected: Ubuntu:Pro:26.04:LTS: libnginx-mod-js

NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*, $cookie_*) and a location invoking the ngx.fetch() operation from NGINX JavaScript. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.