CVE record · 3 sources
CVE-2026-97205
CVSS 8.1NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module.
- Vendor
- F5
- Product
- NGINX
- CVSS
- 8.1
- EPSS
- 0.002 (p14)
- Exposure class
- Web platform
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
nginx vulnerabilities
It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of…
-
nginx - security update
Several vulnerabilities were discovered in nginx, a high performance web and reverse proxy server. Depending on the configuration, these could result in memory corruption, denial of service, injection of requests to backend…
-
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module.
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes (SSI) page containing “include…