Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
NGINX may restart or have memory altered via upstream traffic
published 3 months ago
Summary
If you use NGINX with Server-Side Includes, proxy_pass and have proxy buffering turned off, an attacker who can intercept and change the responses from the upstream server could cause the NGINX worker process to crash or restart. This could let the attacker slightly modify what the server is handling, but it does not give access to your management interface. Update NGINX to a patched version or disable the risky configuration until the fix is applied.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | nginx | All versions |
Original advisory text
ECHO-9338-7b65-6a75
References
Timeline
Published18 Jul 2026
Updated18 Jul 2026
First seen18 Jul 2026
Sources
ECHO-9338-7b65-6a75 · OSV
Track software like this
Free during beta