DeutschShown in its original language — a full translation is planned for a future version.
NGINX Open Source und NGINX Plus: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung
view advisory published 2026-05-25
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NGINX und NGINX NGINX Plus ausnutzen, um einen Denial of Service Angriff durchzuführen, und potenziell um beliebigen Programmcode auszuführen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-9256US | — | Exploit | ||
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct,… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-59362 vom 2026-09-09external
- Red Hat Security Advisory RHSA-2026:28921 vom 2026-06-24external
- Red Hat Security Advisory RHSA-2026:28973 vom 2026-06-24external
- Red Hat Security Advisory RHSA-2026:29151 vom 2026-06-24external
- Red Hat Security Advisory RHSA-2026:33313 vom 2026-06-30external
- Red Hat Security Advisory RHSA-2026:44481 vom 2026-07-23external
- Amazon Linux Security Advisory ALAS2NGINX1-2026-013 vom 2026-06-08external
- Rocky Linux Security Advisory RLSA-2026:28212 vom 2026-06-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan