#nginx


Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

Jul 20, 2026 // 00:22

F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with […]

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

Jun 18, 2026 // 20:41

F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve code execution on affected […]

F5 issues out-of-band patches for critical NGINX vulnerabilities

Jun 18, 2026 // 14:36

Cybersecurity company F5 has released out-of-band security updates to address multiple NGINX web server vulnerabilities, including two critical-severity flaws that could allow attackers to execute […]

New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare

Jun 3, 2026 // 11:39

Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers, including NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora. The vulnerability […]

NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE

May 18, 2026 // 10:03

A newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild, days after its public disclosure, according […]

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

May 15, 2026 // 13:07

Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open, including a critical flaw that remained undetected for 18 years. The vulnerability, […]

18-year-old NGINX vulnerability allows DoS, potential RCE

May 14, 2026 // 20:57

An 18-year-old flaw in the NGINX open-source web server, discovered using an autonomous scanning system, can be exploited for denial of service and, under certain […]

Critical Nginx UI auth bypass flaw now actively exploited in the wild

Apr 16, 2026 // 09:38

A critical vulnerability in Nginx UI with Model Context Protocol (MCP) support is now being exploited in the wild for full server takeover without authentication. […]

Critical nginx-ui Vulnerability CVE-2026-33032 Allows Unauthenticated Nginx Takeover

Apr 15, 2026 // 16:00

A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the wild. The vulnerability in question […]