CVE-2026-27654 - Vulnerability Analysis

Overview

NGINX Open Source and NGINX Plus contain a buffer overflow caused by improper handling of DAV module MOVE or COPY methods with prefix location and alias directives, letting attackers cause worker process termination or modify file names outside document root, exploit requires specific configuration with DAV module MOVE or COPY methods.

Severity & Score

Impact

Attackers can terminate worker processes or modify file names outside document root, potentially disrupting service or causing limited file tampering.

Mitigation

Update to the latest supported version of NGINX Open Source or NGINX Plus.

References

• https://my.f5.com/manage/s/article/K000160382

Social Media Activity(2 posts)

/r/netsec

@_r_netsec

Apr 11, 2026

Claude + Humans vs nginx: CVE-2026-27654 https://blog.calif.io/p/claude-humans-vs-nginx-cve-2026-27654

View original post

/r/netsec

@_r_netsec

Apr 11, 2026

Claude + Humans vs nginx: CVE-2026-27654 https://blog.calif.io/p/claude-humans-vs-nginx-cve-2026-27654

View original post

GitHub Repositories(1 repo)

• https://github.com/JohannesLks/CVE-2026-27654

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner