https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:59:26 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:28212 <p><strong>Affected:</strong> AlmaLinux:9: nginx, AlmaLinux:9: nginx-all-modules, AlmaLinux:9: nginx-core, AlmaLinux:9: nginx-filesystem, AlmaLinux:9: nginx-mod-devel, AlmaLinux:9: nginx-mod-http-image-filter, AlmaLinux:9: nginx-mod-http-perl, AlmaLinux:9: nginx-mod-http-xslt-filter, AlmaLinux:9: nginx-mod-mail, AlmaLinux:9: nginx-mod-stream</p> <p>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.</p> <p>Security Fix(es):</p> <p>* nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: nginx, AlmaLinux:9: nginx-all-modules, AlmaLinux:9: nginx-core, AlmaLinux:9: nginx-filesystem, AlmaLinux:9: nginx-mod-devel, AlmaLinux:9: nginx-mod-http-image-filter, AlmaLinux:9: nginx-mod-http-perl, AlmaLinux:9: nginx-mod-http-xslt-filter, AlmaLinux:9: nginx-mod-mail, AlmaLinux:9: nginx-mod-stream</p> <p>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.</p> <p>Security Fix(es):</p> <p>* nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:28212 https://cve.radiocsirt.org/vuln/bdu:2026-07182 bdu:2026-07182 https://cve.radiocsirt.org/vuln/bdu:2026-07182 https://cve.radiocsirt.org/vuln/bell-cve-2026-9256 <p><strong>Affected:</strong> Alpaquita:23: nginx, Alpaquita:25: nginx, Alpaquita:stream: nginx</p> <p><strong>Affected:</strong> Alpaquita:23: nginx, Alpaquita:25: nginx, Alpaquita:stream: nginx</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-9256 https://cve.radiocsirt.org/vuln/bit-nginx-2026-9256 <p><strong>Affected:</strong> Bitnami: nginx</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p><strong>Affected:</strong> Bitnami: nginx</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/bit-nginx-2026-9256 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0643 certfr-2026-avi-0643 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0643 https://cve.radiocsirt.org/vuln/euvd-2026-358600 EUVD-2026-358600 https://cve.radiocsirt.org/vuln/euvd-2026-358600 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9256 <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-9256 https://cve.radiocsirt.org/vuln/ghsa-h78r-86c6-jgp4 <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/ghsa-h78r-86c6-jgp4 https://cve.radiocsirt.org/vuln/msrc_cve-2026-9256 msrc_CVE-2026-9256 https://cve.radiocsirt.org/vuln/msrc_cve-2026-9256 https://cve.radiocsirt.org/vuln/oesa-2026-2587 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: nginx, openEuler:24.03-LTS-SP1: nginx, openEuler:24.03-LTS-SP3: nginx, openEuler:20.03-LTS-SP4: nginx</p> <p>NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fix(es):</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-9256)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: nginx, openEuler:24.03-LTS-SP1: nginx, openEuler:24.03-LTS-SP3: nginx, openEuler:20.03-LTS-SP4: nginx</p> <p>NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fix(es):</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-9256)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2587 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10852-1 <p>nginx-1.31.1-1.1 on GA media</p> <p>nginx-1.31.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10852-1 https://cve.radiocsirt.org/vuln/rhsa-2026:20351 <p>nginx: ngx_http_rewrite_module: code execution and denial of service nginx: NGINX: Authorization bypass via IP spoofing in HTTP/3 QUIC module nginx: ngx_http_v3_module: use-after-free issue leads to denial of service nginx: NGINX Open Source: Data injection via HTTP/2 proxy configuration</p> <p>nginx: ngx_http_rewrite_module: code execution and denial of service nginx: NGINX: Authorization bypass via IP spoofing in HTTP/3 QUIC module nginx: ngx_http_v3_module: use-after-free issue leads to denial of service nginx: NGINX Open Source: Data injection via HTTP/2 proxy configuration</p> https://cve.radiocsirt.org/vuln/rhsa-2026:20351 https://cve.radiocsirt.org/vuln/rlsa-2026:28212 <p><strong>Affected:</strong> Rocky Linux:9: nginx</p> <p>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.</p> <p>Security Fix(es):</p> <p>* nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:9: nginx</p> <p>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.</p> <p>Security Fix(es):</p> <p>* nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:28212 https://cve.radiocsirt.org/vuln/suse-su-2026:22178-1 <p>Security update for nginx</p> <p>Security update for nginx</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22178-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9256 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nginx, Ubuntu:Pro:16.04:LTS: nginx, Ubuntu:Pro:18.04:LTS: nginx, Ubuntu:Pro:20.04:LTS: nginx, Ubuntu:22.04:LTS: nginx, Ubuntu:24.04:LTS: nginx, Ubuntu:25.10: nginx, Ubuntu:26.04:LTS: nginx</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nginx, Ubuntu:Pro:16.04:LTS: nginx, Ubuntu:Pro:18.04:LTS: nginx, Ubuntu:Pro:20.04:LTS: nginx, Ubuntu:22.04:LTS: nginx, Ubuntu:24.04:LTS: nginx, Ubuntu:25.10: nginx, Ubuntu:26.04:LTS: nginx</p> <p>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9256 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1661 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NGINX und NGINX NGINX Plus ausnutzen, um einen Denial of Service Angriff durchzuführen, und potenziell um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NGINX und NGINX NGINX Plus ausnutzen, um einen Denial of Service Angriff durchzuführen, und potenziell um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1661