كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 5 من 5

• عاليةCVE-2026-77180درجة CVSS 8.302‏/09‏/2026

  When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without san

  CWE-76
• عاليةCVE-2026-66362درجة CVSS 8.102‏/09‏/2026

  Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the Authentication Filter Custom R

  CWE-76
• عاليةCVE-2026-54722درجة CVSS 8.730‏/07‏/2026

  DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is_url_safe in src/helpers.ts strips the @ userinfo delimiter with remove_at_symbol_in_string before new URL parses the URL, allowing an attack

  CWE-76
• عاليةCVE-2026-55723درجة CVSS 8.315‏/07‏/2026

  When NGINX Ingress Controller is configured with Custom Resource Definitions (CRDs) or Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the gen

  CWE-76f5 nginx_ingress_controller
• عاليةCVE-2026-11311درجة CVSS 8.117‏/06‏/2026

  When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the NginxProxy Custom Resource Definition serve

  CWE-76CWE-74f5 nginx_gateway_fabric