Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A significant update for nginx has been released to address multiple vulnerabilities affecting openSUSE Leap 15.6. The vulnerabilities include CVE-2026-1642, a plaintext data injection flaw, CVE-2026-27654, a buffer overflow in the NGINX worker process, CVE-2026-27784, which allows memory overread o...
Oracle Linux versions 8 and 9 have been found vulnerable to multiple critical code execution and denial of service vulnerabilities in nginx. The vulnerabilities include CVE-2026-42945, which allows arbitrary code execution, and CVE-2026-9256, which enables denial of service through specially crafted...
On June 3, 2026, Ubuntu published a security advisory detailing multiple vulnerabilities in nginx affecting various Ubuntu LTS versions. Key issues include improper handling of memory operations in the ngx_mail_smtp_module (CVE-2025-53859), which could leak sensitive information, and flaws in the ng...
A critical security flaw has been identified in nginx affecting Ubuntu 25.10, 24.04 LTS, and 22.04 LTS. The vulnerability allows an attacker to insert plain text data into responses from upstream proxied servers due to improper handling of proxying to upstream TLS servers. Users are advised to apply...
