Product by Debian
Nginx
49 known vulnerabilities in Nginx (Debian), 1 of them actively exploited (CISA KEV).
Key figures
49
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
11
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 161 other products | 7.5 | |
| Critical | CVE-2026-9256 | NGINX ngx_http_rewrite_module vulnerability | 8.1 | |
| Critical | CVE-2026-42945 | NGINX ngx_http_rewrite_module vulnerability | 8.1 | |
| Critical | CVE-2026-42533 | NGINX Map directive and Regex matching vulnerability | 8.1 | |
| High | CVE-2026-27654 | NGINX ngx_http_dav_module vulnerability | 8.2 | |
| Critical | CVE-2026-42055 | NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability | 8.1 | |
| Critical | CVE-2009-3555 | OpenSSL: security vulnerability | 9.8 | |
| Critical | CVE-2016-0746 | F5 NGINX: Use-After-Free | 9.8 | |
| High | CVE-2016-0742 | F5 NGINX: Denial of Service | 7.5 | |
| High | CVE-2019-9513 | Node: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2021-23017 | F5 NGINX: Off-by-one Error | 7.7 | |
| High | CVE-2019-9511 | Node: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2019-9516 | Apache Traffic Server: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2018-16845 | Nginx: Uncontrolled Resource Consumption | 8.2 | |
| Critical | CVE-2026-93479 | NGINX map directive and regex matching vulnerability | 8.1 | |
| High | CVE-2016-4450 | F5 NGINX: NULL Pointer Dereference | 7.5 | |
| Critical | CVE-2017-20005 | F5 NGINX: Buffer Overflow | 9.8 | |
| Medium | CVE-2025-23419 | TLS Session Resumption Vulnerability | 4.3 | |
| High | CVE-2018-16843 | Nginx: Uncontrolled Resource Consumption | 5.3 | |
| Critical | CVE-2026-15176 | NGINX ngx_http_core_module vulnerability | 8.1 | |
| Critical | CVE-2026-97205 | NGINX ngx_http_core_module vulnerability | 8.1 | |
| High | CVE-2018-16844 | Nginx: Uncontrolled Resource Consumption | 5.3 | |
| Medium | CVE-2016-0747 | F5 NGINX: Denial of Service | 5.3 | |
| High | CVE-2026-27784 | NGINX ngx_http_mp4_module vulnerability | 7.8 | |
| High | CVE-2021-3618 | ALPACA: Improper Certificate Validation | 7.4 |
News
- F5 rushes out emergency NGINX patches for three critical flawscsoonline,
- 17 old software bugs that took way too long to squashcsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 29sans-atrisk-mail,
- Health-ISAC Warns of Increased Attacks from ShinyHunters Threat Actorssans-newsbites-mail,
- Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Executionthehackernews,