vulnfeed — nginx / Traefik

[HIGH] CVE-2026-67309: Traefik versions >= v3.7.0 and <= v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX provider's RewriteTarget middleware (generated f

Sat, 01 Aug 2026 13:17:00 +0000

Traefik versions >= v3.7.0 and <= v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX provider's RewriteTarget middleware (generated from the nginx.ingress.kubernetes.io/rewrite-target annotation). When an Ingress path uses a regex that captures attacker-controlled text without requiring a path separator (e.g., path /api(.*) with rewrite target /$1), a crafted request such as /api../admin matches the public router, is rewritten to a dot-segment traversal path (/../admin

[HIGH] CVE-2026-60005: NGINX ngx_http_slice_module vulnerability

Tue, 14 Jul 2026 07:00:00 +0000

Microsoft Security Update 2026-Jul: NGINX ngx_http_slice_module vulnerability

[HIGH] CVE-2026-42533: NGINX Map directive and Regex matching vulnerability

Tue, 14 Jul 2026 07:00:00 +0000

Microsoft Security Update 2026-Jul: NGINX Map directive and Regex matching vulnerability

[MEDIUM] CVE-2026-56434: NGINX ngx_http_ssi_module vulnerability

Tue, 14 Jul 2026 07:00:00 +0000

Microsoft Security Update 2026-Jul: NGINX ngx_http_ssi_module vulnerability

[HIGH] CVE-2026-9256: NGINX ngx_http_rewrite_module vulnerability