TI-2026-74062 CVE-2026-97205 · GHSA-ff5w-vvxc-fm9x
Use-after-free in NGINX ngx_http_core_module can crash workers
Priority MEDIUM 43
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module.
Vulnerabilities
4 records
TI-2026-74056 CVE-2026-93479 · GHSA-v72q-v4vf-2mx7
Heap buffer overflow in NGINX map directive regex matching
Priority MEDIUM 44
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map outp…
TI-2026-74063 CVE-2026-97629 · GHSA-qhwc-5g9q-3669
Forged SSL sessions in NGINX let attackers bypass client certificates
Priority LOW 36
Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote…
TI-2026-73990 CVE-2026-15176 · GHSA-cvv4-j4mx-w8q5
Heap buffer overflow in NGINX alias and rewrite handling
Priority MEDIUM 44
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable.