Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 42 nginx-mod-fancyindex Update CVE-2026-1642 TLS Attack Fix
nginx-mod-fancyindex: Rebuild for 1.28.2 nginx-mod-headers-more: Rebuild for 1.28.2 nginx-mod-brotli:
Ubuntu 25.10 nginx Critical Insertion Security Flaw USN-8038-1
nginx could be made to insert content into proxied server data.
Debian DSA-6131-1 Nginx Important Man-in-the-Middle Risk CVE-2026-1642
A vulnerability has been discovered in Nginx, a high-performance web and reverse proxy server: If configured to proxy to an upstream TLS server, a man-in-the-m…
Malicious NGINX Configurations Enable Large-Scale Web Traffic Hijacking Campaign
Cybersecurity researchers have disclosed details of an active web traffic hijacking campaign that has targeted NGINX installations and management panels like B…
Fedora 42: nginx-mod-headers-more Critical Data Exposure CVE-2025-53860
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Attention: Fedora 42 Nginx mod-naxsi Memory Disclosure Alert CVE-2025-53859
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Fedora 42: Critical Memory Disclosure in nginx-mod-vts CVE-2025-53859
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Fedora 42: nginx-mod-modsecurity Critical Memory Leak Risk CVE-2025-53859
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Fedora 42: nginx Critical Memory Disclosure CVE-2025-53859
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Fedora 43: nginx-mod-brotli Critical Memory Disclosure CVE-2025-53859
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Fedora 43: nginx-mod-fancyindex Important Memory Disclosure CVE-2025-53859
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Fedora 43: nginx-mod-modsecurity Critical Memory Disclosure CVE-2025-53859
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Fedora 43: Nginx Important Memory Disclosure CVE-2025-53859
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Fedora 43: nginx-mod-vts Critical Memory Leak Vulnerability CVE-2025-53860
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Mageia: Nginx Critical Buffer Over-read Vuln MGASA-2025-0245 CVE-2025-53859
MGASA-2025-0245 - Updated nginx package fixes security vulnerability
Ubuntu 25.04: nginx Important Method Info Exposure Vulnerability USN-7715-1
nginx could be made to expose sensitive information over the network.
Debian 11: DLA-4228-1 urgent update for nginx request smuggling fix
Two vulnerabilities were discovered in Nginx, a high-performance web and reverse proxy server, more precisely in ngx_http_lua_module, which embeds the Lua scri…
Ubuntu 7285-1: nginx Security Advisory Updates
Several security issues were fixed in nginx.
Fedora 41: nginx-mod-vts 2025-66ebd291f8 Security Advisory Updates
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Fedora 41: nginx-mod-naxsi 2025-66ebd291f8 Security Advisory Updates
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Fedora 41: nginx-mod-modsecurity 2025-66ebd291f8 Security Advisory Updates
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Fedora 41: nginx-mod-fancyindex 2025-66ebd291f8 Security Advisory Updates
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Ubuntu 7014-3: nginx Security Advisory Updates
nginx could be made to crash if it received specially crafted network traffic.
Gentoo: GLSA-202409-32: nginx: Security Advisory Updates
Multiple vulnerabilities have been discovered in nginx, the worst of which could result in denial of service.