DeutschShown in its original language — a full translation is planned for a future version.
NGINX: Mehrere Schwachstellen
view advisory published 2026-10-14
Ein Angreifer kann mehrere Schwachstellen in NGINX NGINX Plus und NGINX ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-97629US | medium6.5 | Exploit | ||
Description
When NGINX Plus or NGINX Open Source is configured with ssl_session_cache
shared:name:size
without an explicit ssl_session_ticket_key file directives to automaticall… | ||||
| CVE-2026-97205US | high8.1 | Exploit | ||
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server… | ||||
| CVE-2026-96615US | medium6.5 | — | ||
Description
NGINX Gateway Fabric has a vulnerability when it is configured with Gateway
Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agen… | ||||
| CVE-2026-95101US | medium5.3 | — | ||
Description
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with
proxy_request_buffering on directive, an unauthenticate… | ||||
| CVE-2026-94197US | high7.5 | — | ||
An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the `ExternalAuth` policy or Ingress external a… | ||||
| CVE-2026-93479US | high8.1 | — | ||
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture v… | ||||
| CVE-2026-91184US | high8.8 | — | ||
Description
NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and u… | ||||
| CVE-2026-15176US | high8.1 | — | ||
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referenci… | ||||
| CVE-2026-104939US | high7.5 | — | ||
Description
NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAut… | ||||
| CVE-2026-101025US | medium5.3 | — | ||
Description
NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register clea… | ||||
| CVE-2026-101019US | medium6.5 | — | ||
Description
NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:83427 vom 2026-10-16external
- GitHub Advisory Database vom 2026-10-14external
- GitHub Advisory Database vom 2026-10-14external
- GitHub Advisory Database vom 2026-10-14external
- GitHub Advisory Database vom 2026-10-14external
- GitHub Advisory Database vom 2026-10-14external
- GitHub Advisory Database vom 2026-10-14external
- GitHub Advisory Database vom 2026-10-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan