nginx vulnerabilities including potential remote code execution
The message describes multiple vulnerabilities in NGINX Open Source and NGINX Plus, including buffer overflows that may allow code execution when ASLR is disabled or bypassed. It says the issues appear to affect open source nginx versions prior to 1.31.7 or 1.30.6.
Announced
Machine-extracted · Revision 1Original source
Evidence and details
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
The following appear to impact open source nginx prior to 1.31.7 or 1.30.6. At least two of them include a possibility of RCE.
NGINX Open Source
NGINX Plus and NGINX Open Source
- Affected versions
- prior to 1.31.7 or 1.30.6
The following appear to impact open source nginx prior to 1.31.7 or 1.30.6.
- Fixed versions
- Not stated in this extraction
- Prerequisites
- Not stated in this extraction
NGINX Plus
NGINX Plus and NGINX Open Source
- Affected versions
- Not stated in this extraction
- Fixed versions
- Not stated in this extraction
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2026-93479
CVE-2026-93479
CVE-2026-15176CVE-2026-15176
CVE-2026-97205CVE-2026-97205
CVE-2026-97629CVE-2026-97629
CVE-2026-95101CVE-2026-95101
Publisher severity
No explicit severity was extracted.