Most recent entries from all

bdu:2026-06963

BELL-CVE-2026-42946

Affected: Alpaquita:23: nginx, Alpaquita:25: nginx, Alpaquita:stream: nginx

BIT-nginx-2026-42946 — NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability

Affected: Bitnami: nginx

A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data. When scgi_pass or uwsgi_pass is configured, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to read the memory of the NGINX worker process or restart it. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

certfr-2026-avi-0591 — De multiples vulnérabilités ont été découvertes dans les produits F5. Certaines d'entre elles permettent à un attaquant…

certfr-2026-avi-0591

EUVD-2026-318104

fkie_cve-2026-42946

GHSA-fm65-xrrr-c358

msrc_CVE-2026-42946 — NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability

msrc_CVE-2026-42946

OESA-2026-2510 — nginx security update

Affected: openEuler:24.03-LTS-SP1: nginx

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fix(es):

NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directive is set to "on" or the leaf parameters are configured with a resolver. With this configuration, an unauthenticated attacker can send requests along with conditions beyond its control that may cause a heap-use-after-free error in the NGINX worker process. This vulnerability may result in limited modification of data or the NGINX worker process restarting. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-40701)

NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charset, and charset_map and proxy_pass with disabled buffering ("off") directives are configured, unauthenticated attackers can send requests that with conditions beyond the attackers' control to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-42934)

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by…

openSUSE-SU-2026:10796-1 — nginx-1.31.0-1.1 on GA media

nginx-1.31.0-1.1 on GA media

SUSE-SU-2026:21832-1 — Security update for nginx

Security update for nginx

UBUNTU-CVE-2026-42946

Affected: Ubuntu:Pro:14.04:LTS: nginx, Ubuntu:Pro:16.04:LTS: nginx, Ubuntu:Pro:18.04:LTS: nginx, Ubuntu:Pro:20.04:LTS: nginx, Ubuntu:22.04:LTS: nginx, Ubuntu:24.04:LTS: nginx, Ubuntu:25.10: nginx, Ubuntu:26.04:LTS: nginx

WID-SEC-W-2026-1527 — NGINX Open Source and NGINX Plus: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NGINX Open Source and NGINX Plus ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.