/
vendors:CISA × cves:CVE-2026-93479 × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · high

F5 issues out-of-band patches for three critical NGINX flaws enabling DoS or code execution

F5 released out-of-band security patches for multiple NGINX flaws, including three critical vulnerabilities: CVE-2026-15176 and CVE-2026-97205 in the ngxhttpv3module, and CVE-2026-93479 in the NGINX map directive. Unprivileged remote attackers can exploit them against systems with non-default configurations to cause denial of service or, …

CVE-2026-15176 CVE-2026-97205 CVE-2026-93479
thehackernews.com · high

NGINX patches five flaws in 1.30.6/1.31.7: three memory bugs with possible RCE, a TLS client-cert bypass and HTTP/3 smuggling

NGINX released versions 1.30.6 (stable) and 1.31.7 (mainline) on October 14 to fix five vulnerabilities, one of which has been present in every release since May 2005. Three are memory-corruption bugs that F5 says could crash a worker process or possibly allow code execution. A fourth is a TLS session-ticket flaw that may let a forged ses…

CVE-2026-93479 CVE-2026-42533 CVE-2026-42945