https://seclists.org/oss-sec/2026/q2/657: Host ambiguous quests through NGINX $host and Debian's proxy_params
Published May 21, 2026
·Updated
Affected Software
1 affected component
Nginx nginx<1.29.5
Frequently Asked Questions
1
What is the severity of CVE-2026-XXXX?
The severity of CVE-2026-XXXX is considered high due to potential unauthorized access or information disclosure.
2
How do I fix CVE-2026-XXXX?
To fix CVE-2026-XXXX, upgrade NGINX to version 1.29.5 or later or apply the relevant Debian package updates.
3
What are the potential impacts of CVE-2026-XXXX?
The potential impacts of CVE-2026-XXXX include host ambiguity leading to misrouted requests and possible security risks.
4
Which versions of NGINX are affected by CVE-2026-XXXX?
NGINX versions prior to 1.29.5 are affected by CVE-2026-XXXX.
5
How can I verify if my NGINX installation is affected by CVE-2026-XXXX?
You can verify if your NGINX installation is affected by checking the version number against known vulnerable versions.