https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:52:29 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-16019 bdu:2025-16019 https://cve.radiocsirt.org/vuln/bdu:2025-16019 https://cve.radiocsirt.org/vuln/bell-cve-2025-53859 <p><strong>Affected:</strong> Alpaquita:23: nginx, Alpaquita:25: nginx, Alpaquita:stream: nginx</p> <p><strong>Affected:</strong> Alpaquita:23: nginx, Alpaquita:25: nginx, Alpaquita:stream: nginx</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-53859 https://cve.radiocsirt.org/vuln/bit-nginx-2025-53859 <p><strong>Affected:</strong> Bitnami: nginx</p> <p>NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method &#34;none,&#34; and (3) the authentication server returns the &#34;Auth-Wait&#34; response header.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p><strong>Affected:</strong> Bitnami: nginx</p> <p>NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method &#34;none,&#34; and (3) the authentication server returns the &#34;Auth-Wait&#34; response header.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/bit-nginx-2025-53859 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0691 certfr-2025-avi-0691 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0691 https://cve.radiocsirt.org/vuln/euvd-2026-260021 EUVD-2026-260021 https://cve.radiocsirt.org/vuln/euvd-2026-260021 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53859 <p>NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method &#34;none,&#34; and (3) the authentication server returns the &#34;Auth-Wait&#34; response header.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method &#34;none,&#34; and (3) the authentication server returns the &#34;Auth-Wait&#34; response header.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-53859 https://cve.radiocsirt.org/vuln/ghsa-2qmj-q2xc-85v8 <p>NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method &#34;none,&#34; and (3) the authentication server returns the &#34;Auth-Wait&#34; response header.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method &#34;none,&#34; and (3) the authentication server returns the &#34;Auth-Wait&#34; response header.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/ghsa-2qmj-q2xc-85v8 https://cve.radiocsirt.org/vuln/msrc_cve-2025-53859 msrc_CVE-2025-53859 https://cve.radiocsirt.org/vuln/msrc_cve-2025-53859 https://cve.radiocsirt.org/vuln/oesa-2025-2086 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: nginx</p> <p>NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fix(es):</p> <p>NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method &amp;quot;none,&amp;quot; and (3) the authentication server returns the &amp;quot;Auth-Wait&amp;quot; response header.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2025-53859)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: nginx</p> <p>NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fix(es):</p> <p>NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method &amp;quot;none,&amp;quot; and (3) the authentication server returns the &amp;quot;Auth-Wait&amp;quot; response header.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2025-53859)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2086 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15449-1 <p>nginx-1.29.1-1.1 on GA media</p> <p>nginx-1.29.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15449-1 https://cve.radiocsirt.org/vuln/rhsa-2026:8346 <p>nginx: NGINX ngx_mail_smtp_module vulnerability nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file NGINX: NGINX Plus: NGINX Open Source: NGINX Plus and NGINX Open Source: Request manipulation via header injection in SMTP upstream requests NGINX: NGINX: Certificate revocation bypass when OCSP is enabled nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files</p> <p>nginx: NGINX ngx_mail_smtp_module vulnerability nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file NGINX: NGINX Plus: NGINX Open Source: NGINX Plus and NGINX Open Source: Request manipulation via header injection in SMTP upstream requests NGINX: NGINX: Certificate revocation bypass when OCSP is enabled nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files</p> https://cve.radiocsirt.org/vuln/rhsa-2026:8346 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-53859 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nginx, Ubuntu:Pro:16.04:LTS: nginx, Ubuntu:Pro:18.04:LTS: nginx, Ubuntu:Pro:20.04:LTS: nginx, Ubuntu:22.04:LTS: nginx, Ubuntu:24.04:LTS: nginx, Ubuntu:25.10: nginx</p> <p>NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method &#34;none,&#34; and (3) the authentication server returns the &#34;Auth-Wait&#34; response header. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nginx, Ubuntu:Pro:16.04:LTS: nginx, Ubuntu:Pro:18.04:LTS: nginx, Ubuntu:Pro:20.04:LTS: nginx, Ubuntu:22.04:LTS: nginx, Ubuntu:24.04:LTS: nginx, Ubuntu:25.10: nginx</p> <p>NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method &#34;none,&#34; and (3) the authentication server returns the &#34;Auth-Wait&#34; response header. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-53859 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1817 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NGINX und NGINX NGINX Plus ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NGINX und NGINX NGINX Plus ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1817