Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

8 / 8 results
Active filter:tag: #nginx✕ clear
F5 patches critical RCE flaws in NGINX web server and modulescriticalbug_reportVulnerability
bug_reportVulnerability

F5 patches critical RCE flaws in NGINX web server and modules

NGINX Open Source, NGINX Plus, NGINX Ingress Controller, NGINX Gateway Fabric, and NGINX Instance Manager. Three critical vulnerabilities: CVE-2026-15176 and CVE-2026-97205 in ngx_http_v3_module, CVE-2026-93479 in NGINX map directive.

F519 Oct · 11:49 UTC
Heap buffer overflow in NGINX allows DoS or RCE, patch immediatelycriticalbug_reportVulnerability
bug_reportVulnerability

Heap buffer overflow in NGINX allows DoS or RCE, patch immediately

NGINX Plus and NGINX Open Source (specific vulnerable versions not disclosed in available data). Heap-based buffer overflow vulnerabilities affect both commercial and open source editions.

NGINX19 Oct · 11:27 UTC
NGINX 1.30.6 and 1.31.7 fix 5 flaws including 3 memory bugs with RCE riskhighbug_reportVulnerability
bug_reportVulnerability

NGINX 1.30.6 and 1.31.7 fix 5 flaws including 3 memory bugs with RCE risk

NGINX versions 0.1.29 to 1.31.6 (varies by CVE). Five vulnerabilities affect specific configurations: CVE-2026-15176 (alias + rewrite, since 0.1.29), CVE-2026-93479 (regex map, 1.30.0+), CVE-2026-97205 (AIO + SSI, 0.8.11+), CVE-2026-95101 (HTTP/3, 1.…

NGINX15 Oct · 10:58 UTC
Critical NGINX heap overflow enables RCE via crafted HTTP requestscriticalbug_reportVulnerability
bug_reportVulnerability

Critical NGINX heap overflow enables RCE via crafted HTTP requests

NGINX open source versions prior to 1.30.4 and 1.31.3, and NGINX Plus versions prior to 37.0.3.1. All deployments accepting HTTP requests from untrusted networks are at risk.

CVE-2026-4253319 Jul · 18:42 UTC
CERT.BE warns of multiple high-severity NGINX vulnerabilitieshighbug_reportVulnerability
bug_reportVulnerability

CERT.BE warns of multiple high-severity NGINX vulnerabilities

NGINX components (specific versions not disclosed in available information). Affects web servers, reverse proxies, and load balancers running vulnerable NGINX installations.

NGINX16 Jul · 12:42 UTC
F5 patches high-severity flaws in NGINX Open Source and Gateway Fabrichighbug_reportVulnerability
bug_reportVulnerability

F5 patches high-severity flaws in NGINX Open Source and Gateway Fabric

NGINX Open Source and NGINX Gateway Fabric (specific versions not provided). Four CVEs: CVE-2026-11311, CVE-2026-42055, CVE-2026-42530, CVE-2026-50107. Affects organizations running NGINX web servers, reverse proxies, API gateways, and Kubernetes ing…

CVE-2026-1131119 Jun · 06:24 UTC
NGINX Open Source RCE via HTTP/3 use-after-free (CVE-2026-42530)criticalbug_reportVulnerability
bug_reportVulnerability

NGINX Open Source RCE via HTTP/3 use-after-free (CVE-2026-42530)

NGINX Open Source versions with ngx_http_v3_module enabled. Specific vulnerable versions not provided in summary. F5 NGINX products potentially affected.

CVE-2026-4253018 Jun · 15:32 UTC
Critical nginx vulnerabilities enable RCE and rate-limit bypasscriticalbug_reportVulnerability
bug_reportVulnerability

Critical nginx vulnerabilities enable RCE and rate-limit bypass

nginx web server (specific versions not provided by CERT.BE advisory). Affects organizations running vulnerable nginx instances, particularly those exposed to the internet or untrusted networks.

nginx19 May · 13:05 UTC