Most recent entries from all

bdu:2026-06961

BELL-CVE-2026-40701

Affected: Alpaquita:23: nginx, Alpaquita:25: nginx

BIT-nginx-2026-40701 — NGINX ngx_http_ssl_module vulnerability

Affected: Bitnami: nginx

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directive is set to "on" or the leaf parameters are configured with a resolver. With this configuration, an unauthenticated attacker can send requests along with conditions beyond its control that may cause a heap-use-after-free error in the NGINX worker process. This vulnerability may result in limited modification of data or the NGINX worker process restarting.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

certfr-2026-avi-0591 — De multiples vulnérabilités ont été découvertes dans les produits F5. Certaines d'entre elles permettent à un attaquant…

certfr-2026-avi-0591

EUVD-2026-318105

fkie_cve-2026-40701

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

GHSA-x88q-x2r7-vg3g

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

msrc_CVE-2026-40701 — NGINX ngx_http_ssl_module vulnerability

msrc_CVE-2026-40701

OESA-2026-2510 — nginx security update

Affected: openEuler:24.03-LTS-SP1: nginx

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fix(es):

NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directive is set to "on" or the leaf parameters are configured with a resolver. With this configuration, an unauthenticated attacker can send requests along with conditions beyond its control that may cause a heap-use-after-free error in the NGINX worker process. This vulnerability may result in limited modification of data or the NGINX worker process restarting. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-40701)

NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charset, and charset_map and proxy_pass with disabled buffering ("off") directives are configured, unauthenticated attackers can send requests that with conditions beyond the attackers' control to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-42934)

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by…

openSUSE-SU-2026:10796-1 — nginx-1.31.0-1.1 on GA media

nginx-1.31.0-1.1 on GA media

SUSE-SU-2026:21832-1 — Security update for nginx

Security update for nginx

UBUNTU-CVE-2026-40701

Affected: Ubuntu:Pro:14.04:LTS: nginx, Ubuntu:Pro:16.04:LTS: nginx, Ubuntu:Pro:18.04:LTS: nginx, Ubuntu:Pro:20.04:LTS: nginx, Ubuntu:22.04:LTS: nginx, Ubuntu:24.04:LTS: nginx, Ubuntu:25.10: nginx, Ubuntu:26.04:LTS: nginx

WID-SEC-W-2026-1527 — NGINX Open Source and NGINX Plus: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NGINX Open Source and NGINX Plus ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.