## USN-8955-1: nginx vulnerabilities

- 種別: advisory
- 関連技術: ubuntu, linux, nginx
- CVE: CVE-2026-15176, CVE-2026-93479
- 公開日時: 2026-10-26T15:34:05.000Z
- 情報源: Ubuntu Security Notices (https://ubuntu.com/security/notices/USN-8955-1)
- パーマリンク: https://vulnpulse.app/items/ubuntu-usn-f9593d40bb52

It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-15176) It was discovered that nginx incorrectly handled map directives using regex matching under certain circumstances. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-93479) It was discovered that nginx incorrectly handled HTTP/3…