NGINX map directive and regex matching vulnerability
CVSS score
8.1
EPSS probability
%0.6
Risk score
0.0
Published
5 d ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
F5 Addresses Multiple NGINX Vulnerabilities in October Security Update
F5 and the NGINX project released security fixes on October 14, 2026, addressing five vulnerabilities in NGINX Open Source and NGINX Plus. The issues affect memory handling, HTTP/3 request processing…
F5, Juniper Networks Patch Critical Vulnerabilities
Successful exploitation of some of these issues could lead to remote code execution and full device takeover. The post F5, Juniper Networks Patch Critical Vulnerabilities appeared first on SecurityWeek.
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a specific configuration to exploit. A fourth lets an attacker forge a TLS session that could
Similar Vulnerabilities
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-93479"