Most recent entries from all

bdu:2026-04821

BELL-CVE-2026-28755

Affected: Alpaquita:23: nginx, Alpaquita:25: nginx, Alpaquita:stream: nginx

BIT-nginx-2026-28755 — NGINX ngx_stream_ssl_module vulnerability

Affected: Bitnami: nginx

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the ssl_verify_client on and ssl_ocsp on directives, allowing the TLS handshake to succeed even after an OCSP check identifies the certificate as revoked.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

certfr-2026-avi-0352 — De multiples vulnérabilités ont été découvertes dans les produits F5. Certaines d'entre elles permettent à un attaquant…

certfr-2026-avi-0352

EUVD-2026-277196

fkie_cve-2026-28755

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

GHSA-hgfr-jmpr-2p89

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

msrc_CVE-2026-28755 — NGINX ngx_stream_ssl_module vulnerability

msrc_CVE-2026-28755

openSUSE-SU-2026:10423-1 — nginx-1.29.7-1.1 on GA media

nginx-1.29.7-1.1 on GA media

RHSA-2026:8346 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

nginx: NGINX ngx_mail_smtp_module vulnerability nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file NGINX: NGINX Plus: NGINX Open Source: NGINX Plus and NGINX Open Source: Request manipulation via header injection in SMTP upstream requests NGINX: NGINX: Certificate revocation bypass when OCSP is enabled nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files

SUSE-SU-2026:21823-1 — Security update for nginx

Security update for nginx

UBUNTU-CVE-2026-28755

Affected: Ubuntu:24.04:LTS: nginx, Ubuntu:25.10: nginx

WID-SEC-W-2026-0860 — NGINX und NGINX Plus: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in NGINX Plus und NGINX ausnutzen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, und potenziell um beliebigen Programmcode auszuführen.