DeutschShown in its original language — a full translation is planned for a future version.
NGINX und NGINX Plus: Mehrere Schwachstellen
view advisory published 2026-06-17
Ein Angreifer kann mehrere Schwachstellen in NGINX und NGINX NGINX Plus ausnutzen, um Daten zu manipulieren, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-50107US | — | — | ||
When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of N… | ||||
| CVE-2026-32682US | — | — | ||
When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with permission to create or modify GRPCRoute resources can cause the NGINX Gateway Fabr… | ||||
| CVE-2026-48142US | — | — | ||
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf… | ||||
| CVE-2026-42530US | — | Exploit | ||
NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along… | ||||
| CVE-2026-42055US | — | Exploit | ||
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 o… | ||||
| CVE-2026-11311US | medium6.5 | — | ||
When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric.… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-59362 vom 2026-09-09external
- Red Hat Security Advisory RHSA-2026:27197 vom 2026-06-26external
- Red Hat Security Advisory RHSA-2026:36331 vom 2026-07-08external
- Red Hat Security Advisory RHSA-2026:36364 vom 2026-07-08external
- Red Hat Security Advisory RHSA-2026:38847 vom 2026-07-13external
- Red Hat Security Advisory RHSA-2026:44481 vom 2026-07-23external
- Red Hat Security Advisory RHSA-2026:46836 vom 2026-07-27external
- Amazon Linux Security Advisory ALAS2NGINX1-2026-014 vom 2026-07-08external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan