Количество 6
Количество 6
CVE-2026-42926
When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2026-42926
When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2026-42926
When NGINX Open Source is configured to proxy HTTP/2 traffic by settin ...
GHSA-v43f-895r-chhh
When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
BDU:2026-06962
Уязвимость модуля ngx_http_proxy_v2_module веб-серверов NGINX Open Source, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
ROS-20260609-73-0013
Уязвимость nginx
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-42926 When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 5.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-42926 When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 5.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-42926 When NGINX Open Source is configured to proxy HTTP/2 traffic by settin ... | CVSS3: 5.8 | 0% Низкий | 3 месяца назад |
| GHSA-v43f-895r-chhh When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 5.8 | 0% Низкий | 3 месяца назад |
 | BDU:2026-06962 Уязвимость модуля ngx_http_proxy_v2_module веб-серверов NGINX Open Source, позволяющая нарушителю оказать воздействие на целостность защищаемой информации | CVSS3: 5.8 | 0% Низкий | 3 месяца назад |
 | ROS-20260609-73-0013 Уязвимость nginx | CVSS3: 5.8 | 0% Низкий | около 2 месяцев назад |
Уязвимостей на страницу