Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution
Affected vendors and products
More on Execution
Other advisories
- HighCVE-2026-109518Debian APT: Remote Code Execution (RCE)
- HighCVE-2026-109518Debian APT: Remote Code Execution (RCE)
- HighCVE-2026-76506Cisco UCS Central Software: authenticated remote code execution via web management interface (CVE-2026-76506)
- Not ratedosv:CVE-2026-92211Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability
- Not ratedosv:CVE-2026-114550libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability
- Not ratedosv:CVE-2026-119084Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters
- Not ratedosv:CVE-2026-54161upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution
- CriticalCVE-2026-44267Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access
Other news entries
- ChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data ExfiltrationNewsCheck Point Research
- NCSC-2026-0467 [1.00] [M/H] Kwetsbaarheden verholpen in Google Android en Samsung MobileNewsNCSC-NL
- Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command ExecutionNewsThe Hacker News
- The Sandbox Fights Back: Joe Security Launches Adaptive DetonationNewsCSO Online
- Cisco UCS Central Software Remote Code Execution VulnerabilityNewsCisco PSIRT
- Android’s November 2026 Updates Patch Over 200 VulnerabilitiesNewsSecurityWeek
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacksNewsBleepingComputer
- From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion pathsNewsMicrosoft Threat Intelligence
Source: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html
ID