Threats Tagged 'cve-2026-78689'
View all threats tagged with 'cve-2026-78689'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-78689'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-78689 is a high-severity vulnerability in the NGINX JavaScript (njs) XML module's namespace prefix list parser. It can be triggered remotely without authentication via the xml.exclusiveC14n() method when an externally controlled XML namespace prefix list is passed. Both the njs and QuickJS engines are affected, causing out-of-bounds writes that lead to worker crashes or memory growth. The vulnerability affects the nginxinc/nginx-saml reference implementation during SAML signature verification, allowing crafted SAML messages to trigger the flaw without requiring a valid signature. Code execution has not been demonstrated but cannot be ruled out. This is a data plane issue causing denial of service through worker restarts or memory exhaustion. Versions from 0.7.10 up to but not including 1.0.1 are affected. No patch information is provided. Join the discussion | CVE Database V5 | 09/02/2026, 16:17:00 UTC Added: 09/02/2026, 15:53:04 UTC |
Showing 1 to 1 of 1 result