At a glance
- Nginx disclosed buffer overflow CVE-2026-93479 during script evaluation.
- Nginx 1.31.2–1.31.6 and 1.30.0–1.30.5 are affected; severity is medium.
- Check the version and upgrade the 1.31 branch to 1.31.7+ or the 1.30 branch to 1.30.6+.
Nginx discloses CVE-2026-93479: check versions and upgrade affected branches
Nginx disclosed buffer overflow CVE-2026-93479 during script evaluation, rated medium severity. Nginx 1.31.2–1.31.6 and 1.30.0–1.30.5 are affected; check the installed version and upgrade to 1.31.7+ or 1.30.6+, respectively.
In this article
Nginx has disclosed CVE-2026-93479, which occurs during script evaluation in affected versions. See the Nginx advisory to review the source information.
Overview and technical details
The buffer overflow occurs when Nginx evaluates a script. The stated severity is medium.
| Field | Details |
|---|---|
| Product | Nginx |
| CVE | CVE-2026-93479 |
| Severity | medium |
| Source | Nginx Security |
Affected systems
| Product | Affected versions | Unaffected versions |
|---|---|---|
| Nginx | 1.31.2–1.31.6 | 1.31.7+ |
| Nginx | 1.30.0–1.30.5 | 1.30.6+ |
System checks
Check the installed Nginx version with the following command:
nginx -VCompare the result: versions 1.31.2–1.31.6 and 1.30.0–1.30.5 require an upgrade; 1.31.7+ and 1.30.6+ are unaffected.
Remediation and mitigation
Upgrade the Nginx 1.31 branch to 1.31.7+ or the 1.30 branch to 1.30.6+.
References
Related articles
UnrealIRCd: CISA confirms active exploitation of CVE-2026-114713
CISA confirms CVE-2026-114713 in UnrealIRCd is being exploited in the wild. A user on a network with at least two linked servers can inject server-to-server commands executed with server privileges. Prioritize mitigations under CISA guidance before the KEV deadline of 2026-11-16.
Node.js releases security updates for the 22.x, 24.x, and 26.x lines
Node.js has released security updates for the 22.x, 24.x, and 26.x lines, fixing HTTP/2, HTTPS, and TLS flaws that may disrupt servers, expose memory or data, or bypass certificate authentication. Check your version and upgrade to the corresponding security release.