CVE WATCH / VULNERABILITY DETAIL

CVE-2026-93479

HIGHCVSS 8.1NVD feed

Published 14 October 2026 · tracked since 15 October 2026

Description

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cac

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools