Live · 98 sources · updated 11m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 3 sources

CVE-2026-97205

CVSS 8.1

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module.

Vendor
F5
Product
NGINX
CVSS
8.1
EPSS
0.002 (p14)
Exposure class
Web platform

Coverage

3

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. Ubuntu notice Ubuntu

    nginx vulnerabilities

    It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of…

  2. Debian advisory Debian

    nginx - security update

    Several vulnerabilities were discovered in nginx, a high performance web and reverse proxy server. Depending on the configuration, these could result in memory corruption, denial of service, injection of requests to backend…

  3. CVE NVD

    NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module.

    NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes (SSI) page containing “include…

    CVSS 8.1 CVE-2026-97205 F5

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help