Skip to content
Threat Feed

Product

NGINX JavaScript

1 brief RSS
high advisory

NGINX JavaScript Heap Buffer Overflow Vulnerability (CVE-2026-8711)

NGINX JavaScript is vulnerable to a heap buffer overflow (CVE-2026-8711) when the js_fetch_proxy directive is configured with client-controlled variables and ngx.fetch(), allowing unauthenticated attackers to cause worker process restarts or, with ASLR disabled, code execution via crafted HTTP requests.

NGINX JavaScript cve heap-buffer-overflow nginx
2r 3t 1c