Medium DSA-6131-1 1 CVE

nginx - security update

Published Feb 12, 2026 · Updated Feb 12, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 12	nginx	1.22.1-9+deb12u4
Debian · 13	nginx	1.26.3-3+deb13u2

Vulnerabilities 1

Medium 5.9

CVE-2026-1642

NGINX vulnerability

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side—along with conditions beyond the attacker's contro…

F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi

Feb 4, 2026