← Back to feed Search feed

nginx vulnerabilities

28 entries matching nginx — updated 2026-11-03 · vulnfeed

CVE / IDTitleSeverityCVSSEPSSSourceDate
CVE-2026-120428PandaWiki 3.65.0 through 3.87.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackeMEDIUM5.1—NVD2026-11-02
CVE-2026-59387The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ enHIGH8.814%ileNVD2026-10-30
CVE-2026-119572Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX prHIGH7.08%ileNVD2026-10-30
CVE-2026-119573Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the crLOW2.120%ileNVD2026-10-30
CVE-2026-15176NGINX ngx_http_core_module vulnerabilityHIGH8.158%ileMicrosoft2026-10-13
CVE-2026-93479NGINX Map directive and Regex matching vulnerabilityHIGH8.168%ileMicrosoft2026-10-13
CVE-2026-97205NGINX ngx_http_core_module vulnerabilityHIGH8.158%ileMicrosoft2026-10-13
CVE-2026-101019NGINX ngx_http_js_module vulnerabilityMEDIUM6.511%ileMicrosoft2026-10-13
CVE-2026-97629NGINX ngx_http_ssl_module vulnerabilityMEDIUM6.516%ileMicrosoft2026-10-13
CVE-2026-95101NGINX ngx_http_v3_module vulnerabilityMEDIUM5.328%ileMicrosoft2026-10-13
CVE-2026-101025NGINX ngx_http_js_module vulnerabilityMEDIUM5.324%ileMicrosoft2026-10-13
CVE-2026-18329NGINX ngx_http_js_module vulnerabilityHIGH8.251%ileMicrosoft2026-09-08
CVE-2026-78689NGINX ngx_http_js_module vulnerablilityHIGH8.155%ileMicrosoft2026-09-08
CVE-2026-78222NGINX ngx_http_js_module vulnerabilityHIGH7.550%ileMicrosoft2026-09-08
CVE-2026-60005NGINX ngx_http_slice_module vulnerabilityHIGH8.255%ileMicrosoft2026-07-14
CVE-2026-42533NGINX Map directive and Regex matching vulnerabilityHIGH8.194%ileMicrosoft2026-07-14
CVE-2026-56434NGINX ngx_http_ssi_module vulnerabilityMEDIUM6.542%ileMicrosoft2026-07-14
CVE-2026-42055NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerabilityHIGH8.194%ileMicrosoft2026-06-09
CVE-2026-49975Apache HTTP Server: mod_http2 denial of serviceHIGH7.598%ileMicrosoft2026-06-09
CVE-2026-48142NGINX ngx_http_charset_module vulnerabilityMEDIUM4.853%ileMicrosoft2026-06-09
CVE-2026-42945NGINX ngx_http_rewrite_module vulnerabilityHIGH8.199%ileMicrosoft2026-05-12
CVE-2026-8711NGINX JavaScript vulnerabilityHIGH8.196%ileMicrosoft2026-05-12
CVE-2026-9256NGINX ngx_http_rewrite_module vulnerabilityHIGH8.196%ileMicrosoft2026-05-12
CVE-2026-40460NGINX ngx_quic_module vulnerabilityMEDIUM6.531%ileMicrosoft2026-05-12
CVE-2026-42946NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerabilityMEDIUM6.561%ileMicrosoft2026-05-12
CVE-2026-40701NGINX ngx_http_ssl_module vulnerabilityMEDIUM4.853%ileMicrosoft2026-05-12
CVE-2026-42934NGINX ngx_http_charset_module vulnerabilityMEDIUM4.854%ileMicrosoft2026-05-12
CVE-2025-53859NGINX ngx_mail_smtp_module vulnerabilityMEDIUM5.636%ileMicrosoft2025-08-12