---
title: Multiple vulnerabilities discovered in web server "nginx"
url: https://www.dataloco.com/en/multiple-vulnerabilities-discovered-in-web-server-nginx
published: 2026-10-22T14:20:54+00:00
language: en
section: Security
source: https://www.security-next.com/191645
organizations: nginx, F5
publisher: Dataloco
---

# Multiple vulnerabilities discovered in web server "nginx"

Multiple vulnerabilities have been identified in the web server "nginx" and related products. These vulnerabilities may lead to denial of service, code execution, authentication bypass, and leakage of sensitive information.

On October 14, 2026, F5 published a security advisory outside of its regular schedule, revealing a total of 11 vulnerabilities based on CVE, including five vulnerabilities related to "nginx" and six vulnerabilities in related products.

The official site of the open-source "nginx" has assessed the five vulnerabilities found in its core as having a severity level of "Medium."

However, F5's advisory indicates that three of the vulnerabilities have a base score of "9.2" according to the Common Vulnerability Scoring System "CVSSv4.0," categorizing them as "Critical."

Specifically, "CVE-2026-15176" is identified as a heap buffer overflow vulnerability confirmed under specific settings related to URL rewriting and file path referencing.