Known vulnerabilities in nginx-core

Known vulnerabilities in nginx-core

Vendor: OpenAnolis

Software: nginx-core

Software CPE: cpe:2.3:o:openanolis:nginx-core:*:*:*:*:*:anolis_os:*:*

Website: https://openanolis.cn/

Total vulnerabilities: 16

Public exploits: 3

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU137847 - Heap-based Buffer Overflow CVE-2026-42533	CWE-122	High	No	No	1.30.4-1	16.07.2026	SB2026071606 SB20260721112 SB20260721113 and 10 more
#VU137846 - Use of Uninitialized Resource CVE-2026-60005	CWE-908	High	No	No	1.30.4-1	16.07.2026	SB2026071606 SB20260721112 SB20260721113 and 10 more
#VU137845 - Use After Free CVE-2026-56434	CWE-416	Medium	No	No	1.30.4-1	16.07.2026	SB2026071606 SB20260721112 SB20260721113 and 10 more
#VU134864 - Out-of-bounds read CVE-2026-48142	CWE-125	Medium	No	No	1.30.2-2	18.06.2026	SB2026061844 SB2026061845 SB2026061846 and 10 more
#VU134861 - Heap-based Buffer Overflow CVE-2026-42055	CWE-122	High	No	No	1.30.2-2	18.06.2026	SB2026061844 SB2026061845 SB2026061846 and 13 more
#VU132220 - Heap-based Buffer Overflow CVE-2026-9256	CWE-122	Critical	Available	No	1.30.2-1	25.05.2026	SB2026052502 SB2026052504 SB2026052505 and 12 more
#VU131378 - Authentication Bypass by Spoofing CVE-2026-40460	CWE-290	Medium	No	No	1.30.2-1	14.05.2026	SB2026051401 SB2026051497 SB2026051498 and 4 more
#VU131377 - Heap-based Buffer Overflow CVE-2026-42945	CWE-122	Critical	Available	Exploited	1.26.2-9	14.05.2026	SB2026051401 SB2026051497 SB2026051498 and 27 more
#VU131375 - Uncontrolled Memory Allocation CVE-2026-42946	CWE-789	Medium	No	No	1.26.2-10	14.05.2026	SB2026051401 SB2026051497 SB2026051498 and 14 more
#VU124480 - Integer overflow CVE-2026-27784	CWE-190	High	No	No	1.26.2-6	25.03.2026	SB2026032585 SB20260325200 SB2026040801 and 17 more
#VU124478 - Heap-based Buffer Overflow CVE-2026-27654	CWE-122	Medium	Available	No	1.26.2-5	25.03.2026	SB2026032585 SB20260325200 SB2026033174 and 17 more
#VU124475 - Out-of-bounds write CVE-2026-32647	CWE-787	High	No	No	1.26.2-8	25.03.2026	SB2026032585 SB20260325200 SB2026040801 and 17 more
#VU124473 - NULL Pointer Dereference CVE-2026-27651	CWE-476	Medium	No	No	1.26.2-8	25.03.2026	SB2026032585 SB20260325200 SB2026040801 and 17 more
#VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2026-1642	CWE-349	Medium	No	No	1.26.2-4	05.02.2026	SB2026020501 SB2026020505 SB2026020511 and 22 more
#VU114082 - Out-of-bounds read CVE-2025-53859	CWE-125	Low	No	No	1.26.2-3	14.08.2025	SB2025081427 SB2025082564 SB2025082961 and 12 more
#VU103686 - Improper Authentication CVE-2025-23419	CWE-287	Low	No	No	1.26.2-2	06.02.2025	SB2025020653 SB2025020670 SB2025020671 and 17 more