Multiple vulnerabilities in Nginx, including spoofing, denial of service, remote code execution, and data manipulation, can be exploited by a remote attacker. Affected versions are Nginx stable prior to version 1.30.1 and Nginx mainline prior to version 1.31.0. The solution is to apply the fixes provided by the vendor at the specified advisory URL.
Multiple vulnerabilities were identified in Nginx. A remote attacker could exploit some of these vulnerabilities to trigger spoofing, denial of service condition, remote code execution, sensitive information disclosure, security restriction bypass and data manipulation on the targeted system. Impact Denial of Service Information Disclosure Remote Code Execution Data Manipulation Spoofing Security Restriction Bypass System / Technologies affected Nginx version prior to nginx-1.30.1 stable Nginx version prior to nginx-1.31.0 mainline Solutions Before installation of the software, please visit the vendor web-site for more details. Apply fixes issued by the vendor: https://nginx.org/2026.html