Threats Tagged 'cve-2026-97205'
View all threats tagged with 'cve-2026-97205'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-97205'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-97205 is a high-severity Use-After-Free vulnerability in the ngx_http_core_module of NGINX Plus and NGINX Open Source. It occurs when asynchronous file I/O (AIO) is enabled and Server Side Includes (SSI) pages with "include virtual" commands are processed. This flaw can cause memory corruption, worker process crashes, and potentially remote code execution if Address Space Layout Randomization (ASLR) is disabled or bypassed. The issue affects multiple versions of NGINX Plus and Open Source as specified. There is no control plane exposure; the vulnerability impacts only the data plane. No known exploits are reported in the wild, and no patch information is provided in the source data. Join the discussion | CVE Database V5 | 10/14/2026, 14:40:27 UTC Added: 10/14/2026, 14:49:22 UTC |
Showing 1 to 1 of 1 result