Skip to content
Threat Feed
Subscribe

Tag

Dav

1 brief RSS
high advisory

NGINX ngx_http_dav_module Buffer Overflow Vulnerability (CVE-2026-27654)

A buffer overflow vulnerability (CVE-2026-27654) exists in the ngx_http_dav_module of NGINX Open Source and NGINX Plus, potentially allowing attackers to terminate the NGINX worker process or modify files outside the document root by exploiting specific configurations with MOVE or COPY methods.

NGINX Open Source +1 nginx dav buffer-overflow cve-2026-27654 denial-of-service
2r 1t