ZDI-CAN-29287
HIGH 8.1
Upcoming
Mar 06, 2026
NGINX
NGINX is a widely-used open-source web server and reverse proxy software that handles traffic for millions of websites globally. This high-severity vulnerability can be exploited remotely by unauthenticated attackers under specific conditions to compromise confidentiality, integrity, and availability, though it requires some complexity to execute. Security teams should monitor for patches between the March 2026 report date and July 2026 deadline, and prioritize updates for internet-facing NGINX instances once fixes are available.
Advisory Details
Researcher
Jeremy Brown
Reported
March 06, 2026
Deadline
July 04, 2026
79d
CVSS Vector
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H