Detections
Analytics
CVE-2026-9256
critical
Tenable Plugins
Coming Soon
nginx nginx-CVE-2026-9256.html: Buffer overflow in the ngx_http_rewrite_module (Last Updated: 5/28/2026)
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 325203 | MiracleLinux 8 : nginx:1.24 (AXSA:2026-1164:01) | Nessus | Miracle Linux Local Security Checks | critical |
| 324343 | Oracle Linux 9 : nginx (ELSA-2026-28973) | Nessus | Oracle Linux Local Security Checks | critical |
| 323965 | Oracle Linux 9 : nginx:1.24 (ELSA-2026-28212) | Nessus | Oracle Linux Local Security Checks | critical |
| 323696 | TencentOS Server 3: nginx:1.24 (TSSA-2026:0558) | Nessus | Tencent Local Security Checks | critical |
| 323058 | AlmaLinux 10 : nginx (ALSA-2026:29874) | Nessus | Alma Linux Local Security Checks | critical |
| 322967 | RHEL 10 : nginx (RHSA-2026:29874) | Nessus | Red Hat Local Security Checks | critical |
| 322964 | RockyLinux 10 : nginx (RLSA-2026:29874) | Nessus | Rocky Linux Local Security Checks | critical |
| 322925 | SUSE SLES16 Security Update : nginx (SUSE-SU-2026:22178-1) | Nessus | SuSE Local Security Checks | critical |
| 322883 | Oracle Linux 9 : nginx:1.26 (ELSA-2026-29151) | Nessus | Oracle Linux Local Security Checks | critical |
| 322869 | AlmaLinux 9 : nginx:1.24 (ALSA-2026:28212) | Nessus | Alma Linux Local Security Checks | critical |
| 322860 | AlmaLinux 9 : nginx:1.26 (ALSA-2026:29151) | Nessus | Alma Linux Local Security Checks | critical |
| 322827 | AlmaLinux 8 : nginx:1.24 (ALSA-2026:28921) | Nessus | Alma Linux Local Security Checks | critical |
| 322819 | AlmaLinux 9 : nginx (ALSA-2026:28973) | Nessus | Alma Linux Local Security Checks | critical |
| 322784 | RHEL 9 : nginx:1.26 (RHSA-2026:29151) | Nessus | Red Hat Local Security Checks | critical |
| 322771 | RockyLinux 9 : nginx:1.26 (RLSA-2026:29151) | Nessus | Rocky Linux Local Security Checks | critical |
| 322498 | Oracle Linux 8 : nginx:1.24 (ELSA-2026-28921) | Nessus | Oracle Linux Local Security Checks | critical |
| 322492 | RHEL 9 : nginx (RHSA-2026:28973) | Nessus | Red Hat Local Security Checks | critical |
| 322401 | RHEL 8 : nginx:1.24 (RHSA-2026:28921) | Nessus | Red Hat Local Security Checks | critical |
| 322376 | RockyLinux 8 : nginx:1.24 (RLSA-2026:28921) | Nessus | Rocky Linux Local Security Checks | critical |
| 322337 | RHEL 9 : nginx:1.24 (RHSA-2026:28212) | Nessus | Red Hat Local Security Checks | critical |
| 322328 | RockyLinux 9 : nginx:1.24 (RLSA-2026:28212) | Nessus | Rocky Linux Local Security Checks | critical |
| 321720 | Debian dla-4634 : libnginx-mod-http-auth-pam - security update | Nessus | Debian Local Security Checks | critical |
| 321550 | Photon OS 4.0: Nginx PHSA-2026-4.0-1036 | Nessus | PhotonOS Local Security Checks | critical |
| 321057 | SUSE SLES15 Security Update : nginx (SUSE-SU-2026:2370-1) | Nessus | SuSE Local Security Checks | critical |
| 321031 | SUSE SLES15 Security Update : nginx (SUSE-SU-2026:2307-1) | Nessus | SuSE Local Security Checks | critical |
| 319859 | Amazon Linux 2023 : nginx, nginx-all-modules, nginx-core (ALAS2023-2026-1773) | Nessus | Amazon Linux Local Security Checks | critical |
| 319833 | Amazon Linux 2 : nginx, --advisory ALAS2NGINX1-2026-013 (ALASNGINX1-2026-013) | Nessus | Amazon Linux Local Security Checks | critical |
| 319760 | TencentOS Server 4: nginx (TSSA-2026:0398) | Nessus | Tencent Local Security Checks | critical |
| 319632 | Debian dsa-6326 : libnginx-mod-http-geoip - security update | Nessus | Debian Local Security Checks | critical |
| 318631 | Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : nginx vulnerabilities (USN-8375-1) | Nessus | Ubuntu Local Security Checks | critical |
| 318250 | Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : nginx vulnerabilities (USN-8354-1) | Nessus | Ubuntu Local Security Checks | critical |
| 318137 | Fedora 43 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-dd9cd16b18) | Nessus | Fedora Local Security Checks | critical |
| 317368 | Fedora 44 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-da68d7bf53) | Nessus | Fedora Local Security Checks | critical |
| 115255 | Nginx < 1.30.2 Buffer Overflow | Web App Scanning | Component Vulnerability | critical |
| 115254 | Nginx 1.31.0 Buffer Overflow | Web App Scanning | Component Vulnerability | critical |
| 442343 | Alpine: multiple nginx packages: security update to 1.28.3-r2 | Tenable Cloud Security | Alpine Linux Local Security Checks | critical |
| 442343 | Alpine: multiple nginx packages: security update to 1.28.3-r2 | Tenable Self-Hosted Container Security | Alpine Linux Local Security Checks | critical |
| 316660 | FreeBSD : nginx -- heap buffer overflow in ngx_http_rewrite_module (36a3131d-5600-11f1-b339-3497f65b111b) | Nessus | FreeBSD Local Security Checks | critical |