hacker-news · Crawled Oct 15, 2026
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
2 CVEs
Read original article ↗
AI Summary
NGINX has released updates (versions 1.30.6 and 1.31.7) to address five vulnerabilities, including potential remote code execution (RCE) and a TLS session forgery flaw that could bypass client-certificate checks. The most severe flaws are heap overflows and a use-after-free condition, exploitable under specific configurations involving alias with rewrite, regex maps, AIO with SSI, or shared TLS session caches. The TLS flaw (CVE-2026-97629) stems from improper rotation of session ticket keys, allowing non-deterministic forged session resumption. No active exploitation has been reported, but prior NGINX flaws have seen rapid weaponization post-disclosure.
AI-extracted · verify before operational use
Extracted Entities 2 found
MITRE ATT&CK TTPs 16 techniques
T1055 Process Injection · Defense Evasion T1071.001 Web Protocols · Command And Control T1071.003 Mail Protocols · Command And Control T1203 Exploitation for Client Execution · Execution T1027 Obfuscated Files or Information · Defense Evasion T1056.001 Keylogging · Collection T1059.001 PowerShell · Execution T1082 System Information Discovery · Discovery T1083 File and Directory Discovery · Discovery T1098 Account Manipulation · Persistence T1105 Ingress Tool Transfer · Command And Control T1114 Email Collection · Collection T1555 Credentials from Password Stores · Credential Access T1566 Phishing · Initial Access T1570 Lateral Tool Transfer · Lateral Movement T1588 Obtain Capabilities · Resource Development