[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_fLdP1Ju8Z1tyYpuhRNeGKx52AfMBq45HtaOjoHEwac":3},{"article":4,"iocs":36,"watch_terms":52,"solutions":53,"lesson":146},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"57964fb2-6c81-44ee-9a1f-609d74f600a9","NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks","nginx-fixes-5-flaws-including-possible-rce-and-a-tls-bug-that-may-skip-client-ce-b1e071","NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a specific configuration to exploit. A fourth lets an attacker forge a TLS session that could","NGINX has released versions 1.30.6 and 1.31.7 to address five security vulnerabilities, one of which has existed since May 2005. Three memory bugs could lead to worker process crashes or remote code execution under specific configurations. A TLS flaw allows for forged sessions that may bypass client certificate checks, and an HTTP\u002F3 issue permits extra bytes in requests. None are currently listed as actively exploited.","NGINX fixes five vulnerabilities, including potential RCE and a TLS flaw.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Fnginx-fixes-5-flaws-including-possible.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEionuV8CAd7SP0bgEbHyb-0hp7JWNkWpPjYtkNH9p86nRQrxDN1T97D1cragnVVzAwCEFCuqrwuysgwzxJLfvTXrYhMSGj5rbBzrpjW-VPvAmrc2-9EAR_hBmPigJUOjynvkm0ArpyasyzCOAWUWFYdCqzsbCJVOsxC09LnYwH2dcV4j4Vm9S9VDelXUlc\u002Fs1600\u002Ftls.jpg","2026-10-15T12:58:05+00:00","2026-10-15T16:00:13.64907+00:00",8,[17,20],{"name":18,"type":19},"NGINX","product",{"name":21,"type":22},"F5","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":23,"icon":25,"name":26,"slug":27},null,"Vulnerabilities","vulnerabilities",[29,31],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[37,41,43,46,49],{"type":38,"value":39,"context":40},"cve","CVE-2026-15176","Heap overflow in a worker process: crash, possibly code execution",{"type":38,"value":42,"context":40},"CVE-2026-93479",{"type":38,"value":44,"context":45},"CVE-2026-97205","Use-after-free in a worker process: crash, memory corruption, possibly code execution",{"type":38,"value":47,"context":48},"CVE-2026-95101","Extra bytes injected into a proxied request, or a body past client_max_body_size",{"type":38,"value":50,"context":51},"CVE-2026-97629","A forged TLS session that could bypass client-certificate verification",[21,18],{"controls":54,"vendors":140},[55,84,112],{"slug":56,"name":57,"problem":58,"products":59},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[60,68,76],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":85,"name":86,"problem":87,"products":88},"patch-management","Automated patch management","Known holes get closed in days, not months.",[89,97,105],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":85,"product_name":109,"url":110,"description":111},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":35,"name":113,"problem":114,"products":115},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[116,124,132],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",[141],{"slug":142,"name":21,"logo_path":143,"roles":144},"f5","\u002Fvendor-logos\u002Ff5.png",[145],"affected",{"slug":147,"title":148,"body":149,"framework_refs":150,"framework_notes":161},"nginx-patches-rce-and-tls-auth-bypass-flaws-including-a-20-year-old-bug","NGINX Patches RCE and TLS Auth Bypass Flaws — Including a 20-Year-Old Bug","NGINX has disclosed five security vulnerabilities — three memory-related bugs enabling potential remote code execution or worker crashes, one TLS flaw that can bypass client certificate authentication, and an HTTP\u002F3 input validation issue. The TLS flaw is particularly concerning because client certificate checks are a critical access control mechanism; bypassing them could allow unauthorized actors to impersonate trusted clients. One vulnerability traces back to May 2005, highlighting how long-lived software defects can persist undetected in foundational infrastructure. These flaws underscore the risk of running unpatched, widely-deployed web servers in internet-facing environments. Prompt patching is essential even when no active exploitation has been confirmed, as threat actors rapidly weaponize disclosed CVEs.",[151,152,153,154,155,156,157,158,159,160],"CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 IA-5: Authenticator Management (client certificate enforcement)","NIST SP 800-53 CM-6: Configuration Settings","NIST CSF ID.VM-1: Vulnerabilities are identified and documented","NIST CSF RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks","ITIL Change Management: Emergency Change procedures for critical security patches","PCI DSS Requirement 6.3: Security vulnerabilities are identified and addressed",{}]