https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:28:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-06964 bdu:2026-06964 https://cve.radiocsirt.org/vuln/bdu:2026-06964 https://cve.radiocsirt.org/vuln/bell-cve-2026-40460 <p><strong>Affected:</strong> Alpaquita:25: nginx, Alpaquita:stream: nginx</p> <p><strong>Affected:</strong> Alpaquita:25: nginx, Alpaquita:stream: nginx</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-40460 https://cve.radiocsirt.org/vuln/bit-nginx-2026-40460 <p><strong>Affected:</strong> Bitnami: nginx</p> <p>When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p><strong>Affected:</strong> Bitnami: nginx</p> <p>When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/bit-nginx-2026-40460 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0591 certfr-2026-avi-0591 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0591 https://cve.radiocsirt.org/vuln/euvd-2026-318103 EUVD-2026-318103 https://cve.radiocsirt.org/vuln/euvd-2026-318103 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40460 <p>When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40460 https://cve.radiocsirt.org/vuln/ghsa-h7rq-f9gq-mc8r <p>When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/ghsa-h7rq-f9gq-mc8r https://cve.radiocsirt.org/vuln/msrc_cve-2026-40460 msrc_CVE-2026-40460 https://cve.radiocsirt.org/vuln/msrc_cve-2026-40460 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10796-1 <p>nginx-1.31.0-1.1 on GA media</p> <p>nginx-1.31.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10796-1 https://cve.radiocsirt.org/vuln/rhsa-2026:20351 <p>nginx: ngx_http_rewrite_module: code execution and denial of service nginx: NGINX: Authorization bypass via IP spoofing in HTTP/3 QUIC module nginx: ngx_http_v3_module: use-after-free issue leads to denial of service nginx: NGINX Open Source: Data injection via HTTP/2 proxy configuration</p> <p>nginx: ngx_http_rewrite_module: code execution and denial of service nginx: NGINX: Authorization bypass via IP spoofing in HTTP/3 QUIC module nginx: ngx_http_v3_module: use-after-free issue leads to denial of service nginx: NGINX Open Source: Data injection via HTTP/2 proxy configuration</p> https://cve.radiocsirt.org/vuln/rhsa-2026:20351 https://cve.radiocsirt.org/vuln/suse-su-2026:22943-1 <p>Security update for nginx</p> <p>Security update for nginx</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22943-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40460 <p><strong>Affected:</strong> Ubuntu:25.10: nginx, Ubuntu:26.04:LTS: nginx</p> <p>When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p><strong>Affected:</strong> Ubuntu:25.10: nginx, Ubuntu:26.04:LTS: nginx</p> <p>When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40460 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1527 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NGINX Open Source and NGINX Plus ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NGINX Open Source and NGINX Plus ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1527