Výsledky hledání

SPOJENO PŘES CVE K000162604: NGINX ngx_http_v3_module vulnerability CVE-2026-90439

Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 6.5, CVEs: CVE-2026-90439, Summary: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions 3.5.0 and earlier under certain configurations, a limited heap buffer overflow could happen while processing a Transport Layer Security (TLS) handshake. This can happen in a non-deterministic manner that is beyond the attacker's control. This…

EPSS 0.00 CVSS 6.5 CVE-2026-90439 NGINX OpenSSL F5 FI FR

tg: zranitelnost

16. 9. 04:00 · NCSC-FI · K000162604: NGINX ngx_http_v3_module vulnerability CVE-2026-90439 16. 9. 02:00 · CERT-FR – avis · Vulnérabilité dans F5 NGINX (16 septembre 2026)

F5: risolte vulnerabilità nei prodotti NGINX

F5 ha rilasciato aggiornamenti di sicurezza che sanano 5 nuove vulnerabilità, di cui una con gravità "critica" e 4 con gravità “alta”, in prodotti NGINX, noto software per la gestione del traffico e degli applicativi web.

EPSS 0.00 CVE-2026-18329 CVE-2026-66362 CVE-2026-77180 CVE-2026-78222 CVE-2026-78689 F5 NGINX IT

tg: zranitelnost

3. 9. 12:14 · CSIRT Itálie (ACN) · F5: risolte vulnerabilità nei prodotti NGINX

ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NGINX. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-27654.

EPSS 0.25 CVSS 8.1 CVE-2026-27654 NGINX US

13. 8. 07:00 · Zero Day Initiative · ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability

CVE-2026-56434 NGINX ngx_http_ssi_module vulnerability

Information published.

EPSS 0.00 CVE-2026-56434 NGINX US

19. 7. 10:02 · Microsoft Security · CVE-2026-56434 NGINX ngx_http_ssi_module vulnerability

CVE-2026-42533 NGINX Map directive and Regex matching vulnerability

Information published.

EPSS 0.04 CVE-2026-42533 NGINX US

19. 7. 10:02 · Microsoft Security · CVE-2026-42533 NGINX Map directive and Regex matching vulnerability

CVE-2026-42055 NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

Information published.

EPSS 0.07 CVE-2026-42055 NGINX US

1. 7. 10:01 · Microsoft Security · CVE-2026-42055 NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

CVE-2026-48142 NGINX ngx_http_charset_module vulnerability

Information published.

EPSS 0.01 CVE-2026-48142 NGINX US

27. 6. 10:05 · Microsoft Security · CVE-2026-48142 NGINX ngx_http_charset_module vulnerability

CVE-2026-9256 NGINX ngx_http_rewrite_module vulnerability

Information published.

EPSS 0.11 CVE-2026-9256 NGINX US

27. 5. 10:18 · Microsoft Security · CVE-2026-9256 NGINX ngx_http_rewrite_module vulnerability

CVE-2026-8711 NGINX JavaScript vulnerability

Information published.

EPSS 0.10 CVE-2026-8711 NGINX US

23. 5. 10:02 · Microsoft Security · CVE-2026-8711 NGINX JavaScript vulnerability

Riasztás az NGINX Rift sérülékenységről

Tisztelt Ügyfelünk! A Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet riasztást ad ki az NGINX webszervereket érintő, távoli kódfuttatást lehetővé tevő sebezhetőségről. A CVE-2026-42945 azonosítón nyomon követett, NGINX Rift kódnevű sérülékenység az NGINX széles körben használt HTTP rewrite modulját, az ngx_http_rewrite_module-t érinti. A hiba akkor jelentkezhet, amikor a rewrite direktívát egy másik rewrite, if vagy set direktíva […]

EPSS 0.68 CVE-2026-42945 NGINX HU

14. 5. 11:15 · NKI Maďarsko · Riasztás az NGINX Rift sérülékenységről