CVE record · 3 sources
CVE-2026-97629
CVSS 6.5Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key…
- Vendor
- F5
- Product
- NGINX
- CVSS
- 6.5
- EPSS
- 0.002 (p14)
- Exposure class
- Web platform
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
nginx vulnerabilities
It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of…
-
nginx - security update
Several vulnerabilities were discovered in nginx, a high performance web and reverse proxy server. Depending on the configuration, these could result in memory corruption, denial of service, injection of requests to backend…
-
Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key…
Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote…