IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
5.8Media

CVE-2026-42926NGINX ngx_http_proxy_v2_module vulnerability

F5 NGINX Open Source Publicada: (hace 6 meses)

Descripción

When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Debilidad (CWE): CWE-172

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
f5 nginx gateway fabric 1.3.0 – ≤ 1.6.2
f5 nginx ingress controller 3.5.0 – ≤ 3.7.2
f5 nginx instance manager 2.16.0 – ≤ 2.22.0
F5 NGINX Open Source 1.29.4 – < 1.30.1

Referencias y parches

Coincidencias CPE (NVD) (7)
  • cpe:2.3:a:f5:nginx_gateway_fabric:*:*:*:*:*:*:*:* ≥ 1.3.0 ≤ 1.6.2
  • cpe:2.3:a:f5:nginx_open_source:*:*:*:*:*:*:*:* ≥ 1.29.4 ≤ 1.30.0
  • cpe:2.3:a:f5:nginx_gateway_fabric:*:*:*:*:*:*:*:* ≥ 2.0.0 ≤ 2.6.0
  • cpe:2.3:a:f5:nginx_instance_manager:*:*:*:*:*:*:*:* ≥ 2.16.0 ≤ 2.22.0
  • cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:*:*:*:* ≥ 3.5.0 ≤ 3.7.2
  • cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:*:*:*:* ≥ 4.0.0 ≤ 4.0.1
  • cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:*:*:*:* ≥ 5.0.0 ≤ 5.4.2

CVE recientes del mismo producto — nginx

5.3Media
CVE-2026-95101

NGINX ngx_http_v3_module vulnerability

F5 NGINX Plus; F5 NGINX Open Source

Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with proxy_request_buffering on directive, an unauthenticated attacker may be able to inject data in the proxied request. Impact This vu…

8.1Alta
CVE-2026-93479

NGINX map directive and regex matching vulnerability

F5 NGINX Plus; F5 NGINX Open Source

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same re…

1.2%EPSS
8.1Alta
CVE-2026-97205

NGINX ngx_http_core_module vulnerability

F5 NGINX Plus; F5 NGINX Open Source

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes (SSI) page containing “include virtual” commands may trigger a U…

8.1Alta
CVE-2026-15176

NGINX ngx_http_core_module vulnerability

F5 NGINX Plus; F5 NGINX Open Source

A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable. Alternatively, the same result could be achi…

6.5Media
CVE-2026-97629

NGINX ngx_http_ssl_module vulnerability

F5 NGINX Plus; F5 NGINX Open Source

Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to …

6.5Media
CVE-2026-90439

NGINX ngx_http_v3_module vulnerability

F5 NGINX Plus; F5 NGINX Open Source

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions <= OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This c…