NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 5h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 5h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 5h Vulnerabilitas in software Sparx Systems Enterprise Architect · 6h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 6h Vulnerabilitates in Slican telephonis · 7h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 10h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 10h Langflow's Critica Authenticated RCE Vulnerabilitas Targetata in 1,423 Honeypot Exploit Conatibus · 10h EU Mercatores Gravem Pretium Solvunt Pro Firmware Frigoris Non Purgato · 11h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 5h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 5h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 5h Vulnerabilitas in software Sparx Systems Enterprise Architect · 6h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 6h Vulnerabilitates in Slican telephonis · 7h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 10h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 10h Langflow's Critica Authenticated RCE Vulnerabilitas Targetata in 1,423 Honeypot Exploit Conatibus · 10h EU Mercatores Gravem Pretium Solvunt Pro Firmware Frigoris Non Purgato · 11h

ACyber Sentinel Turma Aestimationis Securitatis

← Redire

⚠️ Renuntiatio Vulnerabilitatis

CVE-2026-95101

MEDIUM CVSS 6.9 CVSS 4.0 📌 Awaiting Analysis

CVE-2026-95101 - NGINX ngx_http_v3_module vulnerability

Description

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with

proxy_request_buffering on directive, an unauthenticated attacker may be able to inject data in the proxied request.

Impact

This vulnerability may allow remote attackers to

inject data in the proxied request. There is no control plane exposure; this is a data plane issue only.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Publicatum: Oct 14, 2026 15:17

Ultima Mutatio: Oct 14, 2026 16:04