Known vulnerabilities in nginx (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:nginx_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 27
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nginx (Ubuntu package) nginx (Ubuntu package) is affected by 27 known vulnerabilities: 2 critical, 7 high, 16 medium, 2 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137847 - Heap-based Buffer Overflow
CVE-2026-42533
CWE-122 High
No
No
1.18.0-6ubuntu14.17, 1.18.0-6ubuntu14.18, 1.18.0-6ubuntu14.19, 1.18.0-6ubuntu14.20, 1.24.0-2ubuntu7.14, 1.24.0-2ubuntu7.15, 1.24.0-2ubuntu7.16, 1.24.0-2ubuntu7.17, 1.28.3-2ubuntu1.7, 1.28.3-2ubuntu1.8, 1.28.3-2ubuntu1.9, 1.28.3-2ubuntu1.10 16.07.2026 SB2026071606
SB20260721112
SB20260721113
and 8 more
#VU137846 - Use of Uninitialized Resource
CVE-2026-60005
CWE-908 High
No
No
1.18.0-6ubuntu14.17, 1.18.0-6ubuntu14.18, 1.18.0-6ubuntu14.19, 1.18.0-6ubuntu14.20, 1.24.0-2ubuntu7.14, 1.24.0-2ubuntu7.15, 1.24.0-2ubuntu7.16, 1.24.0-2ubuntu7.17, 1.28.3-2ubuntu1.7, 1.28.3-2ubuntu1.8, 1.28.3-2ubuntu1.9, 1.28.3-2ubuntu1.10 16.07.2026 SB2026071606
SB20260721112
SB20260721113
and 9 more
#VU137845 - Use After Free
CVE-2026-56434
CWE-416 Medium
No
No
1.18.0-6ubuntu14.17, 1.18.0-6ubuntu14.18, 1.18.0-6ubuntu14.19, 1.18.0-6ubuntu14.20, 1.24.0-2ubuntu7.14, 1.24.0-2ubuntu7.15, 1.24.0-2ubuntu7.16, 1.24.0-2ubuntu7.17, 1.28.3-2ubuntu1.7, 1.28.3-2ubuntu1.8, 1.28.3-2ubuntu1.9, 1.28.3-2ubuntu1.10 16.07.2026 SB2026071606
SB20260721112
SB20260721113
and 9 more
#VU133362 - Resource exhaustion
CVE-2026-49975
CWE-400 High
No
No
1.4.6-1ubuntu3.9+esm8, 1.10.3-0ubuntu0.16.04.5+esm9, 1.14.0-0ubuntu1.11+esm4, 1.18.0-0ubuntu1.7+esm3, 1.18.0-6ubuntu14.13, 1.18.0-6ubuntu14.14, 1.18.0-6ubuntu14.15, 1.24.0-2ubuntu7.10, 1.24.0-2ubuntu7.11, 1.24.0-2ubuntu7.12, 1.28.0-6ubuntu1.5, 1.28.0-6ubuntu1.6, 1.28.0-6ubuntu1.7, 1.28.3-2ubuntu1.3, 1.28.3-2ubuntu1.4, 1.28.3-2ubuntu1.5 04.06.2026 SB2026060491
SB2026060492
SB2026060493
and 30 more
#VU132220 - Heap-based Buffer Overflow
CVE-2026-9256
CWE-122 Critical
Available
No
1.4.6-1ubuntu3.9+esm6, 1.10.3-0ubuntu0.16.04.5+esm7, 1.14.0-0ubuntu1.11+esm2, 1.18.0-0ubuntu1.7+esm1, 1.18.0-6ubuntu14.12, 1.24.0-2ubuntu7.9, 1.28.0-6ubuntu1.4, 1.28.3-2ubuntu1.2 25.05.2026 SB2026052502
SB2026052504
SB2026052505
and 12 more
#VU131379 - Use After Free
CVE-2026-40701
CWE-416 Medium
No
No
1.4.6-1ubuntu3.9+esm6, 1.10.3-0ubuntu0.16.04.5+esm7, 1.14.0-0ubuntu1.11+esm2, 1.18.0-0ubuntu1.7+esm1, 1.18.0-6ubuntu14.12, 1.24.0-2ubuntu7.9, 1.28.0-6ubuntu1.4, 1.28.3-2ubuntu1.2 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 12 more
#VU131378 - Authentication Bypass by Spoofing
CVE-2026-40460
CWE-290 Medium
No
No
1.18.0-6ubuntu14.12, 1.24.0-2ubuntu7.9, 1.28.0-6ubuntu1.4, 1.28.3-2ubuntu1.2 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 4 more
#VU131377 - Heap-based Buffer Overflow
CVE-2026-42945
CWE-122 Critical
Available
Exploited
1.4.6-1ubuntu3.9+esm6, 1.10.3-0ubuntu0.16.04.5+esm7, 1.14.0-0ubuntu1.11+esm2, 1.18.0-0ubuntu1.7+esm1, 1.18.0-6ubuntu14.11, 1.24.0-2ubuntu7.8, 1.28.0-6ubuntu1.3, 1.28.3-2ubuntu1.1 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 26 more
#VU131375 - Uncontrolled Memory Allocation
CVE-2026-42946
CWE-789 Medium
No
No
1.4.6-1ubuntu3.9+esm6, 1.10.3-0ubuntu0.16.04.5+esm7, 1.14.0-0ubuntu1.11+esm2, 1.18.0-0ubuntu1.7+esm1, 1.18.0-6ubuntu14.12, 1.24.0-2ubuntu7.9, 1.28.0-6ubuntu1.4, 1.28.3-2ubuntu1.2 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 14 more
#VU131374 - Out-of-bounds read
CVE-2026-42934
CWE-125 Medium
No
No
1.4.6-1ubuntu3.9+esm6, 1.10.3-0ubuntu0.16.04.5+esm7, 1.14.0-0ubuntu1.11+esm2, 1.18.0-0ubuntu1.7+esm1, 1.18.0-6ubuntu14.12, 1.24.0-2ubuntu7.9, 1.28.0-6ubuntu1.4, 1.28.3-2ubuntu1.2 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 12 more
#VU124482 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-28753
CWE-93 Medium
No
No
1.4.6-1ubuntu3.9+esm6, 1.10.3-0ubuntu0.16.04.5+esm7, 1.14.0-0ubuntu1.11+esm2, 1.18.0-0ubuntu1.7+esm1 25.03.2026 SB2026032585
SB20260325200
SB2026041117
and 4 more
#VU124480 - Integer overflow
CVE-2026-27784
CWE-190 High
No
No
1.4.6-1ubuntu3.9+esm6, 1.10.3-0ubuntu0.16.04.5+esm7, 1.14.0-0ubuntu1.11+esm2, 1.18.0-0ubuntu1.7+esm1 25.03.2026 SB2026032585
SB20260325200
SB2026040801
and 17 more
#VU124478 - Heap-based Buffer Overflow
CVE-2026-27654
CWE-122 Medium
Available
No
1.4.6-1ubuntu3.9+esm6, 1.10.3-0ubuntu0.16.04.5+esm7, 1.14.0-0ubuntu1.11+esm2, 1.18.0-0ubuntu1.7+esm1 25.03.2026 SB2026032585
SB20260325200
SB2026033174
and 17 more
#VU124475 - Out-of-bounds write
CVE-2026-32647
CWE-787 High
No
No
1.4.6-1ubuntu3.9+esm6, 1.10.3-0ubuntu0.16.04.5+esm7, 1.14.0-0ubuntu1.11+esm2, 1.18.0-0ubuntu1.7+esm1 25.03.2026 SB2026032585
SB20260325200
SB2026040801
and 17 more
#VU124473 - NULL Pointer Dereference
CVE-2026-27651
CWE-476 Medium
No
No
1.4.6-1ubuntu3.9+esm6, 1.10.3-0ubuntu0.16.04.5+esm7, 1.14.0-0ubuntu1.11+esm2, 1.18.0-0ubuntu1.7+esm1 25.03.2026 SB2026032585
SB20260325200
SB2026040801
and 17 more
#VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-1642
CWE-349 Medium
No
No
1.4.6-1ubuntu3.9+esm6, 1.10.3-0ubuntu0.16.04.5+esm7, 1.14.0-0ubuntu1.11+esm2, 1.18.0-0ubuntu1.7+esm1, 1.18.0-6ubuntu14.8, 1.24.0-2ubuntu7.6, 1.28.0-6ubuntu1.1 05.02.2026 SB2026020501
SB2026020505
SB2026020511
and 22 more
#VU114082 - Out-of-bounds read
CVE-2025-53859
CWE-125 Low
No
No
1.4.6-1ubuntu3.9+esm6, 1.10.3-0ubuntu0.16.04.5+esm7, 1.14.0-0ubuntu1.11+esm2, 1.18.0-0ubuntu1.7+esm1, 1.18.0-6ubuntu14.7, 1.24.0-2ubuntu7.5, 1.26.3-2ubuntu1.2 14.08.2025 SB2025081427
SB2025082564
SB2025082961
and 12 more
#VU103686 - Improper Authentication
CVE-2025-23419
CWE-287 Low
No
No
1.18.0-0ubuntu1.7, 1.18.0-6ubuntu14.6, 1.24.0-2ubuntu7.3, 1.26.0-2ubuntu3.2 06.02.2025 SB2025020653
SB2025020670
SB2025020671
and 17 more
#VU96020 - Out-of-bounds read
CVE-2024-7347
CWE-125 Medium
No
No
Ubuntu Pro (Infra-only), 1.18.0-0ubuntu1.6, 1.18.0-6ubuntu14.5, 1.24.0-2ubuntu7.1 14.08.2024 SB2024081481
SB2024081706
SB2024081707
and 25 more
#VU68495 - Out-of-bounds read
CVE-2022-41742
CWE-125 Medium
No
No
Ubuntu Pro (Infra-only), 1.14.0-0ubuntu1.11, 1.18.0-0ubuntu1.4, 1.18.0-6ubuntu14.3, 1.22.0-1ubuntu1.1 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 34 more


Showing elements 1 - 20 out of 27