CVE record · 3 sources
CVE-2026-42533
CVSS 8.1A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's…
- Vendor
- F5
- Product
- NGINX
- CVSS
- 8.1
- EPSS
- 0.008 (p58)
- Exposure class
- Web platform, Operating system
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
nginx vulnerabilities
USN-8955-1 fixed vulnerabilities in nginx in Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, and…
-
CVE-2026-42533 NGINX Map directive and Regex matching vulnerability
Information published.
-
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's…
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively…