Skip to content
NGINX Patches Multiple Vulnerabilities, Including RCE Risks

NGINX Patches Multiple Vulnerabilities, Including RCE Risks

First seen 15 Oct 2026, 15:39 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 15, 2026 at 16:37 UTC
  • •Five vulnerabilities in NGINX patched, including RCE risks and a TLS forgery flaw.
  • •Critical memory bugs rated 9.2 on CVSS v4.0 require specific configurations to exploit.
  • •No active exploitation reported; users should update to versions 1.30.6 or 1.31.7.

On October 14, 2026, NGINX released updates to address five vulnerabilities, including three memory bugs that could allow remote code execution (RCE) and a TLS flaw that may permit session forgery. The vulnerabilities, tracked as CVE-2026-97205, CVE-2026-93479, and CVE-2026-15176, have been rated as High or by F5, the company behind NGINX. These flaws require specific configurations to exploit and do not appear to have been in the wild. The affected versions include NGINX Plus and NGINX Open Source. NGINX has advised users to update to versions 1.30.6 or 1.31.7 to mitigate these risks. The vulnerabilities were disclosed in advisories published by F5 on the same day as the patches. No active exploitation has been reported, and none of the vulnerabilities were listed in CISA's Known Exploited Vulnerabilities catalog as of October 15.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-02-05
CVE-2025-23419 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-13
CVE-2026-42945 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-04
Public exploit for CVE-2026-42533 released
A proof-of-concept exploit appeared on GitHub, lowering the barrier for opportunistic attackers.
GitHub
2026-10-14
NGINX vulnerabilities disclosed and patched
F5 published advisories for five vulnerabilities in NGINX, releasing updates to address them.
Thehackernews
2026-10-14
CVE-2026-97205, CVE-2026-93479, CVE-2026-15176 published
F5 disclosed three serious vulnerabilities allowing remote attackers to crash servers or execute code.
X
2026-10-14
CVE-2026-101025 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-14
CVE-2026-101019 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (3)

Following this threat?

Track CVE-2025-23419 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (13)

1 / 4

Common questions

Which versions of NGINX are affected?
Versions prior to 1.30.6 and 1.31.7 are affected by the vulnerabilities.
Is there any active exploitation of these vulnerabilities?
No, there have been no reports of active exploitation in the wild.
What should organizations do to protect themselves?
Organizations should update to the latest versions of NGINX to mitigate the vulnerabilities.