nginx-1.30.2 stable and nginx-1.31.1 mainline versions have been released, with a fix for buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-9256).

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-05-21 21:00 UTC
  • Importiert: 2026-10-20 11:59 UTC
  • CVSS: 9.2
  • Quelle-ID: nginx_sec
  • uid_hash: a9c30501426a3445b62ad97b876f4ee1d56c0841d8364863676756b0db352059

Inhalt

2026-05-22nginx-1.30.2 stable and nginx-1.31.1 mainline versions have been released, with a fix for buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-9256).

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-9256

CRITICAL

9.2

CRITICAL

9.2

2026-05-22

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Nginx Security

nginx_sec

vendor_advisory webserver - de https://nginx.org/index.rss