Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-deterministic manner that is beyond the attacker's control. An attacker could leverage this vulnerability to bypass verification of client certificates. Impact This vulnerability can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with access to sensitive information. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

nginx nginx-CVE-2026-97205.html: Use-after-free when using asynchronous file I/O (AIO)

nginx nginx-CVE-2026-97629.html: Session forgery when using TLS session tickets

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4784aba5-d6a9-11f1-8a93-a0369f6e85b8 advisory.

    The freenginx project reports:
    One of the keys was left uninitialized when using automatic                 rotation of TLS session ticket keys, making it possible to forge                 a session and bypass client certificate verification                 (CVE-2026-97629).

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4d4c2b6e-d433-11f1-a215-a0369f7f7be0 advisory.

    The OpenResty developers report:
    The nginx core was upgraded from nginx 1.31.1 to 1.31.8, which                 incorporates 12 CVE fixes, grouped by the first fixed version:
                1.31.2: HTTP/3 use-after-free (CVE-2026-42530), HTTP/2 and gRPC                 upstream buffer overflow (CVE-2026-42055), and charset conversion                 buffer overread (CVE-2026-48142); 1.31.3: buffer overflow                 involving map and regex (CVE-2026-42533), memory disclosure                 involving slice or background cache updates (CVE-2026-60005),                 and SSI use-after-free (CVE-2026-56434); 1.31.6: HTTP/3 heap                 buffer overflow with certain OpenSSL versions and                 configurations (CVE-2026-90439); 1.31.7: buffer overflow                 involving alias and rewrite (CVE-2026-15176), buffer overflow                 during variable expression evaluation (CVE-2026-93479), HTTP/3                 request body injection (CVE-2026-95101), TLS session ticket                 forgery (CVE-2026-97629), and AIO and SSI use-after-free                 (CVE-2026-97205).

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8955-1 advisory.

    It was discovered that nginx incorrectly handled certain configurations using the alias directive together     with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in     a denial of service, or execute arbitrary code. (CVE-2026-15176)

    It was discovered that nginx incorrectly handled map directives using regex matching under certain     circumstances. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a     denial of service, or execute arbitrary code. (CVE-2026-93479)

    It was discovered that nginx incorrectly handled HTTP/3 requests when proxy_request_buffering was enabled.
    This issue only affected Ubuntu 26.04 LTS and Ubuntu 26.10. A remote attacker could possibly use this     issue to inject data into proxied requests. (CVE-2026-95101)

    It was discovered that nginx incorrectly handled asynchronous file I/O in certain configurations with     Server Side Includes pages. A remote attacker could possibly use this issue to cause nginx to crash,     resulting in a denial of service, or execute arbitrary code. (CVE-2026-97205)

    It was discovered that nginx incorrectly handled SSL session ticket keys when configured with a shared     session cache but without explicit ticket key rotation. This issue only affected Ubuntu 24.04 LTS, Ubuntu     26.04 LTS, and Ubuntu 26.10. A remote attacker could possibly use this issue to forge client SSL sessions     and bypass client certificate verification. (CVE-2026-97629)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3263 advisory.

    A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the     alias directive together with rewrite and a set or return directive referencing the $request_filename     variable. Alternatively, the same result could be achieved when the $request_filename variable is used in     an access log format directive. An unauthenticated attacker along with conditions beyond their control can     exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the     NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with     Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.

    Impact:This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX     system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane     issue only.



    Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
    (CVE-2026-15176)

    A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and     the root directive or access log format references the map's regex capture variables before referencing     the map output variable. Alternatively, the same result could be achieved by using a non-cacheable     variable in a string expression under certain conditions. An unauthenticated attacker along with     conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may     cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can     execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can     bypass ASLR.

    Impact:This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX     system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane     issue only.

    Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
    (CVE-2026-93479)

    DescriptionNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When     using HTTP/3 with

    proxy_request_buffering on directive, an unauthenticated attacker may be able to inject data in the     proxied request.

    Impact

    This vulnerability may allow remote attackers to

    inject data in the proxied request.  There is no control plane exposure; this is a data plane issue only.





    Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
    (CVE-2026-95101)

    NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When     asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes (SSI)     page containing include virtual commands may trigger a Use-After-Free (UAF) in the NGINX worker process.
    This may cause memory corruption or a worker process crash. Additionally, attackers can execute code on     systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.

    Impact:This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX     system, corrupt its memory, or possibly trigger code execution. There is no control plane exposure; this     is a data plane issue only.



    Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
    (CVE-2026-97205)

    DescriptionWhen NGINX Plus or NGINX Open Source is configured with ssl_session_cache

    shared:name:size

    without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket     keys, a remote unauthenticated attacker is able to forge client SSL sessions

    in a non-deterministic manner that is beyond the attacker's control. An attacker could leverage this     vulnerability to bypass verification of client certificates.

    Impact

    This vulnerability can lead to the exposure of resources or functionality to unintended actors, possibly     providing attackers with access to sensitive information. There is no control plane exposure; this is a     data plane issue only.





    Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
    (CVE-2026-97629)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of nginx installed on the remote host is prior to 1.30.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NGINX1-2026-017 advisory.

    A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the     alias directive together with rewrite and a set or return directive referencing the $request_filename     variable. Alternatively, the same result could be achieved when the $request_filename variable is used in     an access log format directive. An unauthenticated attacker along with conditions beyond their control can     exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the     NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with     Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.

    Impact:This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX     system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane     issue only.



    Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
    (CVE-2026-15176)

    A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and     the root directive or access log format references the map's regex capture variables before referencing     the map output variable. Alternatively, the same result could be achieved by using a non-cacheable     variable in a string expression under certain conditions. An unauthenticated attacker along with     conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may     cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can     execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can     bypass ASLR.

    Impact:This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX     system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane     issue only.

    Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
    (CVE-2026-93479)

    DescriptionNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When     using HTTP/3 with

    proxy_request_buffering on directive, an unauthenticated attacker may be able to inject data in the     proxied request.

    Impact

    This vulnerability may allow remote attackers to

    inject data in the proxied request.  There is no control plane exposure; this is a data plane issue only.





    Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
    (CVE-2026-95101)

    NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When     asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes (SSI)     page containing include virtual commands may trigger a Use-After-Free (UAF) in the NGINX worker process.
    This may cause memory corruption or a worker process crash. Additionally, attackers can execute code on     systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.

    Impact:This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX     system, corrupt its memory, or possibly trigger code execution. There is no control plane exposure; this     is a data plane issue only.



    Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
    (CVE-2026-97205)

    DescriptionWhen NGINX Plus or NGINX Open Source is configured with ssl_session_cache

    shared:name:size

    without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket     keys, a remote unauthenticated attacker is able to forge client SSL sessions

    in a non-deterministic manner that is beyond the attacker's control. An attacker could leverage this     vulnerability to bypass verification of client certificates.

    Impact

    This vulnerability can lead to the exposure of resources or functionality to unintended actors, possibly     providing attackers with access to sensitive information. There is no control plane exposure; this is a     data plane issue only.





    Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
    (CVE-2026-97629)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size
    without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket
    keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-deterministic manner
    that is beyond the attacker's control. An attacker could leverage this vulnerability to bypass
    verification of client certificates. Impact This vulnerability can lead to the exposure of resources or
    functionality to unintended actors, possibly providing attackers with access to sensitive information.
    There is no control plane exposure; this is a data plane issue only. Note: Software versions which have
    reached End of Technical Support (EoTS) are not evaluated. (CVE-2026-97629)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When
    asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes (SSI)
    page containing “include virtual” commands may trigger a Use-After-Free (UAF) in the NGINX worker process.
    This may cause memory corruption or a worker process crash. Additionally, attackers can execute code on
    systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.
    Impact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX
    system, corrupt its memory, or possibly trigger code execution. There is no control plane exposure; this
    is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are
    not evaluated. (CVE-2026-97205)

  - A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the
    alias directive together with rewrite and a set or return directive referencing the $request_filename
    variable. Alternatively, the same result could be achieved when the $request_filename variable is used in
    an access log format directive. An unauthenticated attacker along with conditions beyond their control can
    exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the
    NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with
    Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Impact: This
    vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to
    possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only.
    Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
    (CVE-2026-15176)

  - NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3
    with OpenSSL versions <= OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could
    happen while processing a TLS handshake. This can happen in a non-deterministic manner that is beyond the
    attacker's control. This may cause a heap buffer overflow in the NGINX worker process leading to a restart
    and/or limited data corruption. Impact: This vulnerability may allow remote attackers to cause a denial-
    of-service (DoS) on the NGINX system or limited data corruption. There is no control plane exposure; this
    is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are
    not evaluated. (CVE-2026-90439)

  - A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and
    the root directive or access log format references the map's regex capture variables before referencing
    the map output variable. Alternatively, the same result could be achieved by using a non-cacheable
    variable in a string expression under certain conditions. An unauthenticated attacker along with
    conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may
    cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can
    execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can
    bypass ASLR. Impact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on
    the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a
    data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not
    evaluated. (CVE-2026-93479)

  - Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When
    using HTTP/3 with proxy_request_buffering on directive, an unauthenticated attacker may be able to inject
    data in the proxied request. Impact This vulnerability may allow remote attackers to inject data in the
    proxied request. There is no control plane exposure; this is a data plane issue only. Note: Software
    versions which have reached End of Technical Support (EoTS) are not evaluated. (CVE-2026-95101)

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6575 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6575-1                   security@debian.org     https://www.debian.org/security/                               Jan Moj     October 21, 2026                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : nginx     CVE ID         : CVE-2026-15176 CVE-2026-93479 CVE-2026-95101 CVE-2026-97205                      CVE-2026-97629

    Several vulnerabilities were discovered in nginx, a high performance web     and reverse proxy server. Depending on the configuration, these could     result in memory corruption, denial of service, injection of requests to     backend servers, or bypass of client certificate authentication.

    CVE-2026-15176

        Mapping a rewritten request URI to a filesystem path in a location         using the alias directive could cause a buffer overflow.

    CVE-2026-93479

        Evaluation of string expressions in the HTTP and stream modules         could overwrite reserved buffer space, resulting in a buffer overflow.
        Affected operations include evaluation of variable document roots         and access log paths.

        The affected code was introduced into the trixie package by an earlier         security backport.

    CVE-2026-95101

        Incorrect handling of fragmented unknown HTTP/3 frames could cause         their contents to be treated as request body data. When proxying         requests, this could allow injection of requests into a backend server         or bypass of request body size limits.

    CVE-2026-97205

        A counter tracking pending asynchronous operations could overflow,         causing request memory to be freed while still in use. This         use-after-free could result in memory corruption or denial of service.

    CVE-2026-97629

        Incomplete synchronisation of TLS session ticket keys between worker         processes could leave a worker using uninitialised key material. This         could allow forged TLS sessions and bypass of client certificate         authentication.

    For the stable distribution (trixie), these problems have been fixed in     version 1.26.3-3+deb13u10.

    We recommend that you upgrade your nginx packages.

    For the detailed security status of nginx please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/nginx

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 95970257-c867-11f1-9006-3497f65b111b advisory.

    The nginx developers report:

           A buffer overflow might occur in a worker process when using the            alias directive if the request URI was changed by the rewrite            directive and was then mapped to a file path (CVE-2026-15176).


           A buffer overflow might occur in a worker process while evaluating            string expressions with variables, which affected the document root            calculation and request logging in the http and stream modules            (CVE-2026-93479).


           When using HTTP/3 a part of an unknown frame might be treated as the            request body, which might result in bypassing the            client_max_body_size limit or injecting data in the proxied            request (CVE-2026-95101).


           When using TLS session ticket key rotation, one of the keys was left            uninitialized, which might allow to forge a session (CVE-2026-97629).


           When using asynchronous file I/O (AIO), use-after-free might occur in            certain configurations if the SSI page has include virtual commands            (CVE-2026-97205).


Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its banner, the version of Nginx running on the remote host is prior to 1.30.6 or 1.31.x prior to 1.31.7. It is, therefore, affected by multiple vulnerabilities:

- A use-after-free vulnerability exists in the ngx_http_core_module module when asynchronous file I/O (AIO) is enabled in certain configurations and a Server Side Includes (SSI) page containing include virtual commands is processed. A remote attacker can exploit this to cause memory corruption, a restart of the NGINX worker process, or potential code execution on systems with ASLR disabled. (CVE-2026-97205)

- A vulnerability exists in the ngx_http_ssl_module module when ssl_session_cache shared is configured without an explicit ssl_session_ticket_key file directive to automatically rotate SSL session ticket keys. A remote unauthenticated attacker can exploit this to forge client SSL sessions in a non-deterministic manner and bypass verification of client certificates. (CVE-2026-97629)

- A vulnerability exists in the ngx_http_v3_module module when HTTP/3 is used with the proxy_request_buffering on directive. A remote unauthenticated attacker can exploit this to inject data in the proxied request. (CVE-2026-95101)

- A heap-based buffer overflow vulnerability exists when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable, or when a non-cacheable variable is used in a string expression under certain conditions. An unauthenticated attacker can exploit this to cause a denial of service or potential code execution on systems with ASLR disabled. (CVE-2026-93479)

- A heap-based buffer overflow vulnerability exists in the ngx_http_core_module module when a location uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable, or when $request_filename is used in an access log_format directive. An unauthenticated attacker can exploit this to cause a denial of service or potential code execution on systems with ASLR disabled. (CVE-2026-15176)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size     without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket     keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-deterministic manner     that is beyond the attacker's control. An attacker could leverage this vulnerability to bypass     verification of client certificates. Impact This vulnerability can lead to the exposure of resources or     functionality to unintended actors, possibly providing attackers with access to sensitive information.
    There is no control plane exposure; this is a data plane issue only. Note: Software versions which have     reached End of Technical Support (EoTS) are not evaluated. (CVE-2026-97629)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
375436	FreeBSD : freenginx -- TLS session ticket key left uninitialized (4784aba5-d6a9-11f1-8a93-a0369f6e85b8)	Nessus	FreeBSD Local Security Checks	Local	high
374534	FreeBSD : OpenResty -- multiple vulnerabilities in the bundled nginx core (4d4c2b6e-d433-11f1-a215-a0369f7f7be0)	Nessus	FreeBSD Local Security Checks	Local	critical
372414	Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : nginx vulnerabilities (USN-8955-1)	Nessus	Ubuntu Local Security Checks	Local	critical
371840	Amazon Linux 2023 : nginx, nginx-all-modules, nginx-core (ALAS2023-2026-3263)	Nessus	Amazon Linux Local Security Checks	Local	critical
371768	Amazon Linux 2 : nginx (ALASNGINX1-2026-017)	Nessus	Amazon Linux Local Security Checks	Local	critical
477057	Echo: nginx: security update to 1.26.3-3+deb13u10	Tenable Cloud Security	Echo Local Security Checks	Local	high
477057	Echo: nginx: security update to 1.26.3-3+deb13u10	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
476639	Alpine: multiple nginx packages: security update to 1.30.6-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	critical
476639	Alpine: multiple nginx packages: security update to 1.30.6-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	critical
370146	Debian dsa-6575 : libnginx-mod-http-geoip - security update	Nessus	Debian Local Security Checks	Local	critical
366445	FreeBSD : nginx -- multiple vulnerabilities (95970257-c867-11f1-9006-3497f65b111b)	Nessus	FreeBSD Local Security Checks	Local	critical
115713	Nginx < 1.30.6 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical
115712	Nginx 1.31.x < 1.31.7 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical
365990	Linux Distros Unpatched Vulnerability : CVE-2026-97629	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-97629

high

Tenable Plugins

Coming Soon

high

critical

critical

critical

critical

high

high

critical

critical

critical

critical

critical

critical

high