Search CVE reports


Toggle filters

1 – 10 of 73 results


CVE-2026-42946

Medium priority
Needs evaluation

[Unknown description]

1 affected package

nginx

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
nginx Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-42945

High priority

Some fixes available 4 of 8

NGINX ngx_http_rewrite_module vulnerability

1 affected package

nginx

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
nginx Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-42934

Medium priority
Needs evaluation

[Unknown description]

1 affected package

nginx

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
nginx Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-42926

Medium priority
Needs evaluation

[Unknown description]

1 affected package

nginx

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
nginx Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-40701

Medium priority
Needs evaluation

[Unknown description]

1 affected package

nginx

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
nginx Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-40460

Medium priority
Needs evaluation

[Unknown description]

1 affected package

nginx

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
nginx Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-32647

Medium priority

Some fixes available 3 of 7

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly...

1 affected package

nginx

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
nginx Not affected Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-28755

Medium priority
Fixed

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the ssl_verify_client on and ssl_ocsp on directives, allowing the...

1 affected package

nginx

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
nginx Not affected Fixed Not affected Not affected Not affected
Show less packages

CVE-2026-28753

Medium priority

Some fixes available 3 of 7

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of CRLF sequences in DNS responses. This allows an attacker-controlled DNS server to inject arbitrary headers...

1 affected package

nginx

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
nginx Not affected Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-27784

Medium priority

Some fixes available 3 of 7

The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially...

1 affected package

nginx

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
nginx Not affected Fixed Fixed Needs evaluation Needs evaluation
Show less packages