CVE-2026-27654 - Vulnerability Analysis

Overview

NGINX Open Source and NGINX Plus contain a buffer overflow caused by improper handling of DAV module MOVE or COPY methods with prefix location and alias directives, letting attackers cause worker process termination or modify file names outside document root, exploit requires specific configuration with DAV module MOVE or COPY methods.

Severity & Score

Impact

Attackers can terminate worker processes or modify file names outside document root, potentially disrupting service or causing limited file tampering.

Mitigation

Update to the latest supported version of NGINX Open Source or NGINX Plus.

References

• https://my.f5.com/manage/s/article/K000160382

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner