CVE record · 3 sources
CVE-2026-95101
CVSS 5.3Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module.
- Vendor
- F5
- Product
- NGINX
- CVSS
- 5.3
- EPSS
- 0.002 (p14)
- Exposure class
- Web platform
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
nginx vulnerabilities
It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of…
-
nginx - security update
Several vulnerabilities were discovered in nginx, a high performance web and reverse proxy server. Depending on the configuration, these could result in memory corruption, denial of service, injection of requests to backend…
-
Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module.
Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with proxy_request_buffering on directive, an unauthenticated attacker may be able to inject data in the…