Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
New PHP Flaw Could Let Attackers Hack Sites Running On Nginx Servers
If you're running any PHP based website on NGINX server and have PHP-FPM feature enabled for better performance, then beware of a newly disclosed vulnerability…
openSUSE Tumbleweed Nginx Important Buffer Overflow Vuln 2026-11807-1
An update that solves one vulnerability can now be installed.
Oracle Nginx Advisory on Moderate DoS and Code Execution ELSA-2026-67315-0
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle Linux 10 nginx Critical Code Execution DoS ELSA-2026-67314-0
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
Oracle Linux nginx Critical Arbitrary Code Execution Bug ELSA-2026-66542-0
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Mageia nginx Critical Proxy and Charset Module Vulnerabilities 2026-0279
Security update
openSUSE Nginx New Moderate Update Advisory Released 2026-11295-1
An update that solves 3 vulnerabilities can now be installed.
Oracle Nginx Important Buffer Overflow Fix Advisory ELSA-2026-36331
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle Linux 9 Nginx Important Buffer Overflow Advisory ELSA-2026-36618
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle Linux 9 nginx-1.26 Important Denial of Service CVE-2026-9256
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle Linux 9 NGINX Critical Arbitrary Code Execution Vuln ELSA-2026-19371
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle Linux 8 nginx Important Code Execution Vuln ELSA-2026-28921
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Ubuntu LTS USN-4820-1 nginx Moderate Security Patch CVE-2026-27136
A vulnerabilitie was discovered in nghttp2, a server, proxy and client implementing HTTP/2. CVE-2026-27135 Fix missing iframstate validations to avoid assertio…
SUSE nginx Important Memory Overread Buffer Overflow Vuln 2026-1761-1
An update that solves four vulnerabilities can now be installed.
openSUSE Leap 15.6 nginx Major Vulnerabilities Buffer Overflows 2026-1761-1
An update that solves four vulnerabilities can now be installed.
UBUNTU 2026 nginx Vulnerability Low Response Splitting Bug 31427-2
An update that solves one vulnerability and has one fix can now be installed.
Major Security Update for Ubuntu Jammy Jellyfish Nginx CVE-2026-36473
An update that solves one vulnerability can now be installed.
SUSE: Nginx Important Auth Bypass & Leak CVE-2025-23419 CVE-2025-53859
* bsc#1236851 * bsc#1248070 Cross-References: * CVE-2025-23419
SUSE: 2025:03243-1 moderate: nginx
* bsc#1236851 * bsc#1248070 Cross-References: * CVE-2025-23419
Fedora 40: nginx-mod-modsecurity 2024-6ba57fd2a3 Security Advisory Updates
Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash (CVE-2024-7347). Thanks to Nils Bars.
Fedora 40: nginx-mod-vts 2024-6ba57fd2a3 Security Advisory Updates
Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash (CVE-2024-7347). Thanks to Nils Bars.
Fedora 40: nginx-mod-fancyindex 2024-6ba57fd2a3 Security Advisory Updates
Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash (CVE-2024-7347). Thanks to Nils Bars.
Fedora 39: nginx-mod-fancyindex 2024-8ba5080dfa Security Advisory Updates
Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash (CVE-2024-7347). Thanks to Nils Bars.
Fedora 39: nginx-mod-vts 2024-8ba5080dfa Security Advisory Updates
Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash (CVE-2024-7347). Thanks to Nils Bars.