Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:f5:nginx_open_source:*:*:*:*:*:*:*:*

4 briefs RSS
medium advisory

Vulnerability in F5 NGINX

A vulnerability in F5 NGINX, tracked as CVE-2026-90439, allows remote attackers to trigger a denial of service and potentially compromise data integrity.

NGINX Open Source +1 vulnerability webserver dos
1c
high advisory

CVE-2026-50107: NGINX Gateway Fabric Configuration Injection Vulnerability

An injection vulnerability, CVE-2026-50107, exists in the NGINX configuration generator component of NGINX Gateway Fabric when configured with NGINX Plus or NGINX Open Source as the data plane, allowing authenticated attackers with CRD modification permissions to inject arbitrary NGINX configuration directives via unsanitized user-supplied string values in the access log format setting, leading to control plane compromise and potential defense evasion or system impact.

PoC NGINX Plus +10 config-injection nginx kubernetes cloud-native web-vulnerability cve
2r 1t 5c 2i updated
critical advisory

Nginx Vulnerability Leading to Remote Code Execution and Denial of Service

A vulnerability in Nginx allows a remote attacker to execute arbitrary code and cause a denial-of-service condition, affecting Nginx Open Source versions 1.x before 1.30.2, versions after 1.31.0 before 1.31.1, Nginx Plus versions 37.x before 37.0.1.1, and versions Rx before R36 P5 or R32 P7.

PoC NGINX Open Source +1 nginx rce dos CVE-2026-9256 webserver
2r 2t 1c updated
medium advisory

Multiple Vulnerabilities in Tenable Sensor Proxy

Multiple vulnerabilities in Tenable Sensor Proxy versions prior to 1.4.0 could allow a remote attacker to cause a denial of service, data confidentiality breaches, and other unspecified security impacts.

Sensor Proxy vulnerability dos dataleak
1r 1t 5c