Search: “nginx”

90 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 90 Malware 39 Exploit / PoC 30 Ransomware 19 Threat actor 14 Data breach 13 Policy & legal 10 Industry 9 AI tools & infra 9 Advisory 5 AI industry 4 Phishing & fraud 3 Tools 3 Research 2

SeverityAll critical 110 high 55 medium 50 low 20 info 17

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

The Hacker NewsMay 21, 07:24 UTC · May 21, 2026Vulnerability CVE-2026-42945 CVE-2026-42946 CVE-2026-40701+1 CVEs

60

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

The Hacker NewsJun 22, 05:37 UTC · Jun 22, 2026Vulnerability in the wildCVE-2026-42530 CVE-2026-42055 CVE-2026-42945

60

Building security into cloud native apps with NGINX

Help Net SecurityFeb 19, 00:00 UTC · Feb 19, 2019Vulnerability1

30

Attackers are exploiting critical NGINX vulnerability (CVE-2026-42945)

Help Net SecurityMay 18, 00:00 UTC · May 18, 2026Vulnerability CVE-2026-42945

60

Critical Ingress NGINX Controller Vulnerability Allows RCE Without Authentication

The Hacker NewsApr 10, 06:49 UTC · Apr 10, 2025Vulnerability CVE-2025-24513 CVE-2025-24514 CVE-2025-1097+2 CVEs

60

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-33032 CVE-2026-27944 CVE-2026-27825+1 CVEs

60

Ingress-nginx vulnerabilities can lead to Kubernetes cluster takeover

Help Net SecurityMar 25, 00:00 UTC · Mar 25, 2025Vulnerability CVE-2025-1097 CVE-2025-1098 CVE-2025-24514+2 CVEs

60

Nginx server flaws expose more than a million of servers to DoS attacks

Security AffairsNov 10, 08:56 UTC · Nov 10, 2018Vulnerability CVE-2018-16843 CVE-2018-16844 CVE-2018-16845

35

F5 Patches Critical NGINX Vulnerabilities Enabling Unauthenticated Code Execution

Security AffairsJun 18, 14:07 UTC · Jun 18, 2026Vulnerability CVE-2026-42530 CVE-2026-42055 CVE-2026-11311+1 CVEs

60

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

The Hacker NewsJul 28, 17:22 UTC · Jul 28, 2026Vulnerability in the wildCVE-2026-42533 CVE-2026-42945 CVE-2026-92561

60

CVE-2026-33032: severe nginx-ui bug grants unauthenticated server access

Security AffairsApr 15, 18:17 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-33032

60

Russian Police Raided NGINX Moscow Office, Detained Co

The Hacker NewsDec 12, 19:06 UTC · Dec 12, 2019Vulnerability

30

CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers

Security AffairsJul 20, 09:50 UTC · Jul 20, 2026Vulnerability CVE-2026-42533

60

Malicious NGINX Configurations Enable Large

The Hacker NewsFeb 6, 11:32 UTC · Feb 6, 2026Vulnerability in the wildCVE-2025-551821

60

IngressNightmare: Four Critical Bugs Found in 40% of Cloud Systems

Infosecurity MagazineMar 25, 09:30 UTC · Mar 25, 2025Vulnerability CVE-2025-1097 CVE-2025-1098 CVE-2025-24514+1 CVEs

60

Urgent: New Security Flaws Discovered in NGINX Ingress Controller for Kubernetes

The Hacker NewsOct 30, 06:46 UTC · Oct 30, 2023Vulnerability CVE-2022-4886 CVE-2023-5043 CVE-2023-5044

47

PHP RCE flaw actively exploited to pop NGINX servers

Help Net SecurityOct 28, 00:00 UTC · Oct 28, 2019Vulnerability in the wildCVE-2019-11043

60

ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability

An unauthenticated integer underflow (CVE-2026-27654, CVSS 8.1) in NGINX's HTTP Dav module alias directive enables remote code execution.

ZDI advisory ZDI-26-578 describes an integer underflow in the alias directive of the NGINX HTTP Dav module that allows remote attackers to execute arbitrary code. Authentication is not required to exploit the vulnerability. ZDI rated the issue 8.1 on CVSS and assigned CVE-2026-27654.

ZDI Published AdvisoriesAug 13, 05:00 UTC · Aug 13, 2026Vulnerability CVE-2026-27654

30

CVE-2019-11043 exposes Web servers using nginx and PHP

Security AffairsOct 26, 15:10 UTC · Oct 26, 2019Vulnerability in the wildCVE-2019-110431

60

New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare

The Hacker NewsJun 10, 14:36 UTC · Jun 10, 2026Vulnerability CVE-2016-6581 CVE-2025-53020 CVE-2016-8740+3 CVEs

35

QNAP warns of a PHP flaw that could lead to remote code execution

Security AffairsJun 23, 10:48 UTC · Jun 23, 2022Vulnerability CVE-2019-11043

60

The State of Trusted Open Source

The Hacker NewsJan 8, 11:50 UTC · Jan 8, 2026Vulnerability

55

F5 strengthens ADSP with enhanced API discovery and threat detection

Help Net SecurityDec 11, 00:00 UTC · Dec 11, 2025Vulnerability

55

$150K awarded for L1TF Reloaded exploit that bypasses cloud mitigations

Security AffairsSep 23, 10:05 UTC · Sep 23, 2025Vulnerability

30

How we hacked our colleague’s smart home

Kaspersky SecurelistJul 1, 09:00 UTC · Jul 1, 2019Vulnerability

30

Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers

The Hacker NewsJul 10, 11:47 UTC · Jul 10, 2026Vulnerability in the wildCVE-2026-42530

60

The art of being ungovernable

Cisco TalosMay 21, 18:00 UTC · May 21, 2026Vulnerability

42

PolyShell: unrestricted file upload in Magento and Adobe Commerce

Sansec (Magento / e-commerce security)May 12, 10:55 UTC · May 12, 2026Vulnerability in the wild

60

PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage

The Hacker NewsMay 7, 17:58 UTC · May 7, 2026Vulnerability in the wildCVE-2026-0300

60

How to Protect Your SaaS from Bot Attacks with SafeLine WAF

The Hacker NewsMar 9, 14:16 UTC · Mar 9, 2026Vulnerability

55

Researchers Uncover TLS Bootstrap Attack on Azure Kubernetes Clusters

The Hacker NewsAug 21, 03:51 UTC · Aug 21, 2024Vulnerability CVE-2024-7646

47

Critical PHP Vulnerability Exposes QNAP NAS Devices to Remote Attacks

The Hacker NewsJun 23, 06:36 UTC · Jun 23, 2022Vulnerability CVE-2019-11043

60

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0

The Hacker NewsJul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030 CVE-2026-60137 CVE-2026-15409+26 CVEs1

60

OpenSSL Fixes HollowByte Memory Exhaustion Bug

Security AffairsJul 18, 18:24 UTC · Jul 18, 2026Vulnerability

30

Magento and the Log4j vulnerability

Sansec (Magento / e-commerce security)Apr 14, 20:16 UTC · Apr 14, 2026Vulnerability

55

The State of Trusted Open Source Report

The Hacker NewsApr 2, 11:30 UTC · Apr 2, 2026Vulnerability

30

Palo Alto Networks warns that CVE-2025-0111 flaw is actively exploited in attacks

Security AffairsFeb 20, 06:32 UTC · Feb 20, 2025Vulnerability in the wildCVE-2025-0111 CVE-2025-0108 CVE-2024-9474

60

AWS fixes vulnerability affecting container image repository

The RecordJan 9, 00:00 UTC · Jan 9, 2023Vulnerability

42

CISA urges to fix multiple critical flaws in Juniper Networks products

Security AffairsJul 16, 14:16 UTC · Jul 16, 2022Vulnerability CVE-2021-23017 CVE-2014-5044

60

Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux Systems

The Hacker NewsAug 23, 13:27 UTC · Aug 23, 2021Vulnerability in the wildCVE-2017-5638 CVE-2017-9805 CVE-2018-7600+12 CVEs

60