The flaw leads to denial-of-service on default configurations and to remote code execution if ASLR is disabled. The first in-the-wild attacks exploiting a critical-severity NGINX vulnerability patched ...

An LLM-powered system found 4 security bugs, including a critical one in the web server’s URL rewrite module. Researchers have found a critical vulnerability in the widely used Nginx web server that ...

An 18-year-old flaw in the NGINX open-source web server, discovered using an autonomous scanning system, can be exploited for denial of service and, under certain conditions, remote code execution.

Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open, including a critical flaw that remained undetected for 18 years. "NGINX Plus and NGINX ...

Traefik Labs today shipped Traefik Proxy 3.7 and Traefik Hub 3.20, turning the Ingress NGINX migration forced by the Kubernetes project's retirement into a broader runtime-governance upgrade for ...

Attackers are actively exploiting a critical flaw in the widely used nginx-ui interface for managing NGINX web servers. The flaw, tracked as CVE-2026-33032, (CVSS: 9.8) stems from nginx-ui's insecure ...

Hackers are exploiting CVE-2026-33032, a critical remote takeover vulnerability in the Nginx UI management tool. A critical Nginx UI vulnerability that allows attackers to take full control of servers ...

The Kubernetes community retired Ingress NGINX this month after years of under-resourcing. The migration scramble it triggered is now consolidating around one open source beneficiary, and Traefik Labs ...

F5 has built its business on application delivery and security across distributed environments. The announcements include a new observability product called F5 Insight, AI-powered WAF risk scoring, a ...

Four security vulnerabilities have been found in the open source Ingress NGINX traffic controller that is extensively used by organizations in Kubernetes deployments. They can only be fixed by ...

A threat actor is compromising NGINX servers in a campaign that hijacks user traffic and reroutes it through the attacker's backend infrastructure. NGINX is open-source software for web traffic ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Erik Steiger discusses the operational pain ...