https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:29:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-06962 bdu:2026-06962 https://cve.radiocsirt.org/vuln/bdu:2026-06962 https://cve.radiocsirt.org/vuln/bell-cve-2026-42926 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2026-42926 https://cve.radiocsirt.org/vuln/bit-nginx-2026-42926 <p><strong>Affected:</strong> Bitnami: nginx</p> <p>When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p><strong>Affected:</strong> Bitnami: nginx</p> <p>When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/bit-nginx-2026-42926 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0591 certfr-2026-avi-0591 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0591 https://cve.radiocsirt.org/vuln/euvd-2026-318129 EUVD-2026-318129 https://cve.radiocsirt.org/vuln/euvd-2026-318129 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42926 <p>When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-42926 https://cve.radiocsirt.org/vuln/ghsa-v43f-895r-chhh <p>When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/ghsa-v43f-895r-chhh https://cve.radiocsirt.org/vuln/opensuse-su-2026:10796-1 <p>nginx-1.31.0-1.1 on GA media</p> <p>nginx-1.31.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10796-1 https://cve.radiocsirt.org/vuln/rhsa-2026:20351 <p>nginx: ngx_http_rewrite_module: code execution and denial of service nginx: NGINX: Authorization bypass via IP spoofing in HTTP/3 QUIC module nginx: ngx_http_v3_module: use-after-free issue leads to denial of service nginx: NGINX Open Source: Data injection via HTTP/2 proxy configuration</p> <p>nginx: ngx_http_rewrite_module: code execution and denial of service nginx: NGINX: Authorization bypass via IP spoofing in HTTP/3 QUIC module nginx: ngx_http_v3_module: use-after-free issue leads to denial of service nginx: NGINX Open Source: Data injection via HTTP/2 proxy configuration</p> https://cve.radiocsirt.org/vuln/rhsa-2026:20351 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-42926 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nginx, Ubuntu:Pro:16.04:LTS: nginx, Ubuntu:Pro:18.04:LTS: nginx, Ubuntu:20.04:LTS: nginx, Ubuntu:22.04:LTS: nginx, Ubuntu:24.04:LTS: nginx, Ubuntu:25.10: nginx, Ubuntu:26.04:LTS: nginx</p> <p>When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nginx, Ubuntu:Pro:16.04:LTS: nginx, Ubuntu:Pro:18.04:LTS: nginx, Ubuntu:20.04:LTS: nginx, Ubuntu:22.04:LTS: nginx, Ubuntu:24.04:LTS: nginx, Ubuntu:25.10: nginx, Ubuntu:26.04:LTS: nginx</p> <p>When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-42926 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1527 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NGINX Open Source and NGINX Plus ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NGINX Open Source and NGINX Plus ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1527