#nginx
4 articles
CVE-2026-40701: High-Severity Denial of Service in NGINX (Bundle K000160932)
Denial of Service vulnerability in NGINX causing worker process crash, published alongside critical CVE-2026-42945 (RCE with public PoC) as part of F5 advisory K000160932...
CVE-2026-42934: High-Severity Out-of-Bounds Read in NGINX (Bundle K000160932)
Out-of-bounds read vulnerability in NGINX - may lead to disclosure of process memory contents (info disclosure). Published alongside critical CVE-2026-42945 in F5 advisory K000160932...
CVE-2026-42945: Critical RCE in NGINX ngx_http_rewrite_module (Public PoC Available)
Critical RCE vulnerability in NGINX ngx_http_rewrite_module present in source code since 2008 - heap buffer overflow in rewrite and set directive handling allows unauthenticated remote code execution...
CVE-2026-42946: High-Severity Use-After-Free in NGINX (Bundle K000160932)
Use-after-free vulnerability in NGINX published alongside critical CVE-2026-42945 (RCE with public PoC) - potentially allows remote code execution or destabilization of the worker process...