What’s Vulnerable › Products
nginx vulnerabilities
32 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 25 published in the last 12 months.
Check whether your nginx version is affected
Latest nginx vulnerabilities
- CVE-2026-97629 — NGINX ngx_http_ssl_module vulnerability (CVSS 6.5)
- CVE-2026-97205 — NGINX ngx_http_core_module vulnerability (CVSS 8.1)
- CVE-2026-95101 — NGINX ngx_http_v3_module vulnerability (CVSS 5.3)
- CVE-2026-93479 — NGINX map directive and regex matching vulnerability (CVSS 8.1)
- CVE-2026-15176 — NGINX ngx_http_core_module vulnerability (CVSS 8.1)
- CVE-2026-90439 — NGINX ngx_http_v3_module vulnerability (CVSS 6.5)
- CVE-2026-60005 — NGINX ngx_http_slice_module vulnerability (CVSS 8.2)
- CVE-2026-48142 — NGINX ngx_http_charset_module vulnerability (CVSS 4.8)
- CVE-2026-42530 — NGINX Open-Source ngx_http_v3_module vulnerability (CVSS 8.1)
- CVE-2026-42055 — NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability (CVSS 8.1)
- CVE-2026-9256 — NGINX ngx_http_rewrite_module vulnerability (CVSS 8.1)
- CVE-2026-42946 — NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability (CVSS 7.4)
- CVE-2026-42945 — NGINX ngx_http_rewrite_module vulnerability (CVSS 8.1)
- CVE-2026-42934 — NGINX ngx_http_charset_module vulnerability (CVSS 4.8)
- CVE-2026-42926 — NGINX ngx_http_proxy_v2_module vulnerability (CVSS 5.8)
- CVE-2026-40701 — NGINX ngx_http_ssl_module vulnerability (CVSS 4.8)
- CVE-2026-40460 — NGINX ngx_quic_module vulnerability (CVSS 6.5)
- CVE-2026-32647 — NGINX ngx_http_mp4_module vulnerability (CVSS 7.8)
- CVE-2026-28755 — NGINX ngx_stream_ssl_module vulnerability (CVSS 5.4)
- CVE-2026-28753 — NGINX ngx_mail_proxy_module vulnerability (CVSS 3.7)
- CVE-2026-27784 — NGINX ngx_http_mp4_module vulnerability (CVSS 7.8)
- CVE-2026-27654 — NGINX ngx_http_dav_module vulnerability (CVSS 8.2)
- CVE-2026-27651 — NGINX ngx_mail_auth_http_module vulnerability (CVSS 7.5)
- CVE-2026-1642 — NGINX vulnerability (CVSS 5.9)
- CVE-2025-53859 — NGINX ngx_mail_smtp_module vulnerability (CVSS 3.7)