Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
On June 3, 2026, Ubuntu published a security advisory detailing multiple vulnerabilities in nginx affecting various Ubuntu LTS versions. Key issues include improper handling of memory operations in the ngx_mail_smtp_module (CVE-2025-53859), which could leak sensitive information, and flaws in the ng...
A critical memory disclosure vulnerability (CVE-2025-53859) has been identified in Nginx's ngx_mail_smtp_module, affecting the processing of specially crafted login/password combinations using the 'none' authentication method. This issue may lead to memory disclosure to the authentication server. Th...
The ModSecurity-nginx connector, essential for communication between nginx and libmodsecurity, has been identified with critical vulnerabilities leading to memory leak and disclosure risks. Affected versions include those in Fedora 42 and Fedora 43, with updates provided in nginx version 1.28.1 rele...
