nginx vulnerabilities
It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-15176) It was discovered that nginx incorrectly handled map directives using regex matching under certain circumstances. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-93479) It was discovered that nginx incorrectly handled HTTP/3 requests when proxy_request_buffering was enabled. This issue only affected Ubuntu 26.04 LTS and Ubun
Read at Ubuntu Security Notices
- Vendor
- Canonical, F5
- Product
- NGINX
- EPSS
- 0.008 (p58)
- Exposure class
- Web platform
Why it ranks 33 (Notable)
- Product class: web platform
- Widely deployed vendor product (Canonical)
- Covered by 4 independent sources
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ubuntu Security Notices (ubuntu.com)
- CVE-2026-15176 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-93479 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-95101 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-97205 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-97629 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.