📰 Hackers compromise NGINX servers to redirect user traffic

A threat actor is compromising NGINX servers in a campaign that hijacks user traffic and reroutes it through the attacker's backend infrastructure.

🔗 Source: https://www.bleepingcomputer.com/news/security/hackers-compromise-nginx-servers-to-redirect-user-traffic/

#nginx

📰 Nginx Proxy Manager 2.14 Drops armv7 Support

Nginx Proxy Manager 2.14 removes armv7/armhf builds and introduces a new setting for advanced proxy configurations.

🔗 Source: https://linuxiac.com/nginx-proxy-manager-2-14-drops-armv7-support/

#nginx

📰 Nginx 1.29.7 Delivers Multipath TCP Support

Released this week was Nginx 1.29.7 as the newest mainline version of this HTTP(S) web server. Releasing alongside Nginx 1.28.3 stable, it fixed buffer overflow vulnerabilities and some other vulnerabilities. Making Nginx 1.29.7 more exciting though is that it landed Multipath TCP support...

🔗 Source: https://www.phoronix.com/news/Nginx-1.29.7-Multipath-TCP

#nginx

📰 Nginx 1.30 Released With Multipath TCP, ECH & More

Nginx 1.30 was just released as the newest stable version of this popular web server. Nginx 1.30 incorporates all of the changes from the Nginx 1.29.x mainline branch to provide a lot of new functionality like Multipath TCP (MPTCP)...

🔗 Source: https://www.phoronix.com/news/Nginx-1.30-Released

#nginx

📰 Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the wild.The vulnerability in question is CVE-2026-33032 (CVSS score: 9.8), an authentication bypass vulnerability that enables threat actors to seize control of the Nginx service. It has been codenamed MCPwn by Pluto Security.".

🔗 Source: https://thehackernews.com/2026/04/critical-nginx-ui-vulnerability-cve.html

#nginx #opensource #security

📰 I don't use Tailscale or Nginx to access my home lab remotely, here's what I use instead

One of the most useful services to any home labber is a VPN, so that you can access your home network from anywhere and browse as if you're at home. That not only lets you use any self-hosted services you have on your NAS without having to open ports to the wider internet, but it also circumvents any geo-blocked services and nicely encrypts your data, so nobody can snoop in.

🔗 Source: https://www.xda-developers.com/i-dont-use-tailscale-or-nginx-to-access-my-home-lab-remotely-heres-what-i-use-instead/

#nginx

📰 Kubernetes sets a new standard for release notes, also kills Ingress NGINX

Release team explains links between Version 1.36 and classic print The Great Wave off Kanagawa Kubernetes issued a new release called “Haru” on Wednesday, and the release notes and logo might be more interesting than the software.…

🔗 Source: https://go.theregister.com/feed/www.theregister.com/2026/04/23/kubernetes_1_36_haru/

#nginx

📰 Nginx 1.31 Released with HTTP Forward Proxy Support

Nginx 1.31 introduces HTTP forward proxy support and addresses security vulnerabilities in HTTP/2, HTTP/3, OCSP, and core modules.

🔗 Source: https://linuxiac.com/nginx-1-31-released-with-http-forward-proxy-support/

#nginx

📰 NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE

A newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild, days after its public disclosure, according to VulnCheck.The vulnerability, tracked as CVE-2026-42945 (CVSS score: 9.2), is a heap buffer overflow in ngx_http_rewrite_module affecting NGINX versions 0.6.27 through 1.30.0. According to AI-native security company depthfirst, the.

🔗 Source: https://thehackernews.com/2026/05/nginx-cve-2026-42945-exploited-in-wild.html

#nginx

📰 Nginx Proxy Manager 2.15 Brings Debian 13 Base and Security Fixes

Nginx Proxy Manager 2.15 updates Debian, OpenResty, Certbot, Python, and Node dependencies, with caution advised before upgrading.

🔗 Source: https://linuxiac.com/nginx-proxy-manager-2-15-brings-debian-13-base-and-security-fixes/

#debian #nginx #python

📰 New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare

Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers, including NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora.The vulnerability has been codenamed HTTP/2 Bomb by Calif."The vulnerable behavior exists in each server's default HTTP/2 configuration," the company said, adding it was discovered by OpenAI Codex by chaining.

🔗 Source: https://thehackernews.com/2026/06/new-http2-bomb-vulnerability-allows.html

#nginx

📰 Nginx Dark Mode Support For Error Pages Remains Elusive

In early 2025 I wrote about the upstream Nginx web server rejecting dark mode support for its error pages on the basis of wanting to keep the default error pages simple and developers arguing the extra HTML tag for the dark mode styling as superfluous. Following a lot of public backlash for being against offering native dark mode handling by default, Nginx stakeholders were polled and largely came out in favor of supporting the functionality but...

🔗 Source: https://www.phoronix.com/news/Nginx-Dark-Mode-Mystery

#nginx

📰 Nginx Proxy Manager 2.16 Adds Built-In Log Viewer

Nginx Proxy Manager 2.16 introduces a new web UI log viewer, per-path access lists, security fixes, networking improvements, and updated Certbot support.

🔗 Source: https://linuxiac.com/nginx-proxy-manager-2-16-adds-built-in-log-viewer/

#nginx

📰 NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005.There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a specific configuration to exploit.A fourth lets an attacker forge a TLS session that could.

🔗 Source: https://thehackernews.com/2026/10/nginx-fixes-5-flaws-including-possible.html

#nginx