https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:38:51 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-08934 bdu:2026-08934 https://cve.radiocsirt.org/vuln/bdu:2026-08934 https://cve.radiocsirt.org/vuln/bell-cve-2026-48142 <p><strong>Affected:</strong> Alpaquita:25: nginx, Alpaquita:stream: nginx</p> <p><strong>Affected:</strong> Alpaquita:25: nginx, Alpaquita:stream: nginx</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-48142 https://cve.radiocsirt.org/vuln/bit-nginx-2026-48142 <p><strong>Affected:</strong> Bitnami: nginx</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p><strong>Affected:</strong> Bitnami: nginx</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/bit-nginx-2026-48142 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0775 certfr-2026-avi-0775 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0775 https://cve.radiocsirt.org/vuln/euvd-2026-328267 EUVD-2026-328267 https://cve.radiocsirt.org/vuln/euvd-2026-328267 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48142 <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-48142 https://cve.radiocsirt.org/vuln/ghsa-2388-jp8v-fg9w <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/ghsa-2388-jp8v-fg9w https://cve.radiocsirt.org/vuln/msrc_cve-2026-48142 msrc_CVE-2026-48142 https://cve.radiocsirt.org/vuln/msrc_cve-2026-48142 https://cve.radiocsirt.org/vuln/oesa-2026-2798 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: nginx</p> <p>NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fix(es):</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-42055)</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart.</p> <p>Note: Software versio…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: nginx</p> <p>NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fix(es):</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-42055)</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart.</p> <p>Note: Software versio…</p> https://cve.radiocsirt.org/vuln/oesa-2026-2798 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11066-1 <p>nginx-1.31.2-1.1 on GA media</p> <p>nginx-1.31.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11066-1 https://cve.radiocsirt.org/vuln/rhsa-2026:27197 <p>nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers nginx: NGINX: Memory disclosure or denial of service via ngx_http_charset_module heap buffer over-read</p> <p>nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers nginx: NGINX: Memory disclosure or denial of service via ngx_http_charset_module heap buffer over-read</p> https://cve.radiocsirt.org/vuln/rhsa-2026:27197 https://cve.radiocsirt.org/vuln/suse-su-2026:22943-1 <p>Security update for nginx</p> <p>Security update for nginx</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22943-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-48142 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nginx, Ubuntu:Pro:16.04:LTS: nginx, Ubuntu:Pro:18.04:LTS: nginx, Ubuntu:Pro:20.04:LTS: nginx, Ubuntu:22.04:LTS: nginx, Ubuntu:24.04:LTS: nginx, Ubuntu:25.10: nginx, Ubuntu:26.04:LTS: nginx</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nginx, Ubuntu:Pro:16.04:LTS: nginx, Ubuntu:Pro:18.04:LTS: nginx, Ubuntu:Pro:20.04:LTS: nginx, Ubuntu:22.04:LTS: nginx, Ubuntu:24.04:LTS: nginx, Ubuntu:25.10: nginx, Ubuntu:26.04:LTS: nginx</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-48142 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1995 <p>Ein Angreifer kann mehrere Schwachstellen in NGINX und NGINX NGINX Plus ausnutzen, um Daten zu manipulieren, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in NGINX und NGINX NGINX Plus ausnutzen, um Daten zu manipulieren, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1995