Zero Day Monitor
DashboardVulnerabilitiesTrendingZero-DaysNews
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2109 articles · 107087 vulns · 36/40 feeds (7d)
← Back to list
EST
PRE-CVEEXPLOITED
nginx · nginx plus

Multiple vulnerabilities in NGINX and NGINX Plus allow Denial of Service

72% confidence

Description

A local attacker can exploit multiple vulnerabilities in NGINX Plus and NGINX to conduct a Denial of Service attack and disclose confidential information or cause other impacts. [Auto-archived: reprocess_no_remaining_articles — 2026-03-26T10:59:25.126Z]

Affected Products

VendorProductVersions
nginxnginx plus—
CISA KEV❌ No
Actively exploited✅ Yes
Published3/26/2026
Last enriched2h agov2
Tags
denial of servicenginxnginx plus
Trending Score0
Source articles0
Independent0
Info Completeness5/14
Missing: cve_id, versions, cvss, epss, cwe, kev, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Pin to Dashboard

Verification

State: archived
Confidence: 7200%

Version History

v2
Last enriched 2h ago
v2Tier B2h ago

Updated description with more technical detail and marked the vulnerability as actively exploited with an exploit available.

descriptionexploitAvailableactivelyExploited
via BSI Advisories
v12h ago

Initial creation