NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
Summary: NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, including three memory bugs F5 says could crash a worker process or possibly allow code execution, a TLS flaw that could let an attacker forge a session past client-certificate checks, and an HTTP/3 bug that passes extra bytes to a backend. One flaw dates to every release since May 2005, all five require a specific configuration directive to exploit, and none was in CISA's Known Exploited Vulnerabilities catalog as of October 15.
What you should know: The TLS flaw sits in the shared session cache setting NGINX's own documentation uses in its example configuration, and the exposed setting is ssl_session_cache shared:SSL:10m - a default many teams copied without knowing it enables automatic ticket-key rotation with an uninitialized third key slot.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-23419CVE-2026-42533CVE-2026-93479
- Related
- ⚡ Weekly Recap: Word Press RCE, Sonic Wall 0-Days, AI Service Attacks, Share Point 0-Day and More Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026