ZDI-CAN-29287 HIGH 8.1 Upcoming Mar 06, 2026

NGINX

NGINX is a widely-used open-source web server and reverse proxy software that handles traffic for millions of websites globally. This high-severity vulnerability can be exploited remotely by unauthenticated attackers under specific conditions to compromise confidentiality, integrity, and availability, though it requires some complexity to execute. Security teams should monitor for patches between the March 2026 report date and July 2026 deadline, and prioritize updates for internet-facing NGINX instances once fixes are available.

Advisory Details
Researcher Jeremy Brown
Reported March 06, 2026
Deadline July 04, 2026 79d
CVSS Vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy