Nginx Multiple Vulnerabilities

Multiple vulnerabilities were identified in Nginx. A remote attacker could exploit some of these vulnerabilities to trigger spoofing, denial of service condition, remote code execution, sensitive information disclosure, security restriction bypass and data manipulation on the targeted system.

Note: 

CVE-2026-42945 is being exploited in the wild. An unauthenticated remote attacker could exploit this vulnerability by sending crafted HTTP requests to trigger denial of service condition and remote code execution on the targeted system. However, exploitation requires special conditions beyond the attacker’s control and depends on a specific vulnerable configuration in the ngx_http_rewrite_module. Hence, the risk level is rated as High Risk.

[Updated on 2026-05-18]

Updated Description, Source and Related Links.