CVE-2026-95101
NGINX ngx_http_v3_module vulnerability
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with proxy_request_buffering on directive, an unauthenticated attacker may be able to inject data in the proxied request. Impact This vulnerability may allow remote attackers to inject data in the proxied request. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
| CWE | CWE-172 |
| Vendor | f5 |
| Product | nginx plus |
| Published | Oct 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for f5 nginx plus
Be the first to know when new medium vulnerabilities affecting f5 nginx plus are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
Affected Versions
F5 / NGINX Plus
37.1.0 < 37.2.0.1 37.0.0 < 37.0.7.1 R36 < * R35 < * R34 < * R33 < *
F5 / NGINX Open Source
1.31.0 < 1.31.7 1.30.0 < 1.30.6 1.25.0 < *
Credits
F5 acknowledges Hansol Lee (rabbit2747) of GOTROOT for bringing this issue to our attention and following the highest standards of coordinated disclosure.