Nginx Plus EUVD-2026-78585

Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour

Heap buffer overflow in NGINX Plus and NGINX Open Source ngx_http_rewrite_module allows remote attackers to crash worker

Heap-based buffer overflow in NGINX Plus and NGINX Open Source affects deployments that proxy HTTP/2 or gRPC traffic ups

Heap buffer overflow in NGINX Plus and NGINX Open Source ngx_http_rewrite_module can be triggered by unauthenticated rem

Heap buffer overflow in NGINX Plus and NGINX Open Source lets unauthenticated remote attackers crash worker processes (D

Heap buffer overflow in NGINX Plus and NGINX Open Source can be triggered by crafted HTTP requests when a non-default ma

Heap buffer overflow in NGINX Plus and NGINX Open Source can be triggered by unauthenticated remote attackers through cr

Unauthenticated remote attackers can trigger a use-after-free in NGINX's ngx_http_core_module when asynchronous file I/O

Limited memory disclosure and worker-process restart in NGINX Plus and NGINX Open Source arise when the optional ngx_htt

Buffer overflow in NGINX's DAV module allows remote attackers to crash worker processes or manipulate file names outside

NGINX worker process crashes via null pointer dereference in the mail authentication module when CRAM-MD5 or APOP authen

When the NGINX Plus is configured to use the MQTT pre-read module, undisclosed requests can cause an increase in memory