{"schema_version":"1","data":[{"id":19313,"advisory_id":"9e6dbf92-2246-4c2d-a01a-4d0d5186fafb","revision":1,"source_id":"oss-security","source_url":"https://seclists.org/oss-sec/2026/q4/362","source_published_at":"2026-10-23T22:14:20+00:00","published_at":"2026-10-25T02:30:22.665613+00:00","extraction_method":"llm","technologies":["nginx-open-source","nginx-plus","oss-security"],"cve_ids":["CVE-2026-15176","CVE-2026-93479","CVE-2026-95101","CVE-2026-97205","CVE-2026-97629"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"nginx vulnerabilities including potential remote code execution","summary":"The message describes multiple vulnerabilities in NGINX Open Source and NGINX Plus, including buffer overflows that may allow code execution when ASLR is disabled or bypassed. It says the issues appear to affect open source nginx versions prior to 1.31.7 or 1.30.6.","evidence":"The following appear to impact open source nginx prior to 1.31.7 or 1.30.6. At least two of them include a possibility of RCE.","products":[{"name":{"value":"NGINX Open Source","evidence":"NGINX Plus and NGINX Open Source"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"prior to 1.31.7 or 1.30.6","evidence":"The following appear to impact open source nginx prior to 1.31.7 or 1.30.6."}]},{"name":{"value":"NGINX Plus","evidence":"NGINX Plus and NGINX Open Source"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","related_cves":[{"value":"CVE-2026-93479","evidence":"CVE-2026-93479"},{"value":"CVE-2026-15176","evidence":"CVE-2026-15176"},{"value":"CVE-2026-97205","evidence":"CVE-2026-97205"},{"value":"CVE-2026-97629","evidence":"CVE-2026-97629"},{"value":"CVE-2026-95101","evidence":"CVE-2026-95101"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":19313,"next_before":19313}