NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX 1.30.6 and 1.31.7 fix five flaws, including possible worker RCE and a TLS client-cert bypass.
76
- Mentions · 7d0
- Mentions · 30d1
- All mentions8
- First seenAug 13, 2026
- Last mentioned25d ago
Timeline
8 articles · newest firstThe Truth about GET and HTTP Standards, (Tue, Sep 22nd)
SANS research tests Apache, NGINX, and Python server responses to non-standard HTTP GET requests with a body, finding inconsistent handling.
20
New Cache Key Injection Attack Lets Hackers Bypass Access Controls and Poison Nginx Caches
YesWeHack researcher details cache key injection against Nginx, enabling access control bypass, cache poisoning, denial of service, and potential stored XSS.
44
Hackers Can Manipulate Web Cache Keys to Access Restricted Data and Poison Websites
Researcher Alex Brumen demonstrates Nginx cache key injection enabling restricted-data access, cache-poisoned denial of service, and stored XSS.
55
HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th)
RFC 10008 standardizes the HTTP QUERY method, creating potential WAF inspection bypasses, cache poisoning, and CSRF gaps because most defenses don't recognize the new verb.
38
BlackHatSect0r Hackers Disable AI Safety Controls to Automate Credential Theft and Cyberattacks
French-speaking crew BlackHatSect0r disabled AI agent safety controls to automate scanning, credential harvesting, and vishing, exposing 16,834 stolen credentials.
62
Hackers Turn AI Agent Into a Cyber Weapon After Deleting Its Safety Refusals
Researchers exposed BlackHatSect0r && DXQRTXX infrastructure showing a safety-disabled Hermes AI agent used to automate scanning, credential harvesting, and vishing against French telecom subscribers.
60
ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability
An unauthenticated integer underflow (CVE-2026-27654, CVSS 8.1) in NGINX's HTTP Dav module alias directive enables remote code execution.
30
Related CVEs
by mentions- CVE-2026-425306%9.2NGINX Open Source has a vulnerability in the ngx_http_v3_module module
- CVE-2026-425336%9.2A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture…
- Heap buffer overflow in NGINX map regex handling
- CVE-2026-15176<1%9.2NGINX heap overflow via alias and $request_filename
- CVE-2026-97205<1%9.2Use-after-free in NGINX when AIO and SSI are enabled
- CVE-2026-2765425%8.8Buffer Overflow in NGINX ngx_http_dav_module via DAV MOVE/COPY with Alias
- CVE-2026-97629<1%8.3NGINX SSL session-ticket flaw may skip client-cert checks
- HTTP/3 proxied-request injection in NGINX Plus and Open Source
- CVE-2025-234193%5.3When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate…
Appears with
- nginxproduct · 5
- Cloudflarevendor · 3
- DXSCANproduct · 2
- Socradarorganization · 2
- DeepSeekai model · 2
- Nous Researchvendor · 2
- SANSvendor · 1
- YesWeHackorganization · 1
- Apacheproduct · 1
- BlackHatSect0r && DXQRTXXthreat actor · 1
- Djangoproduct · 1
- Apachevendor · 1
- SANS Internet Storm Centerorganization · 1
- CISAorganization · 1
- Hermesai model · 1
- IETForganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.