Medium USN-8038-1 1 CVE

nginx vulnerability

Published Feb 12, 2026 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that nginx incorrectly handled proxying to upstream TLS
servers. An attacker could possibly use this issue to insert plain text
data into the response from an upstream proxied server.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	nginx	1.18.0-6ubuntu14.8
Ubuntu · 24.04 LTS 24.04:LTS	nginx	1.24.0-2ubuntu7.6
Ubuntu · 25.10	nginx	1.28.0-6ubuntu1.1

Vulnerabilities 1

Medium 5.9

CVE-2026-1642

NGINX vulnerability

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side—along with conditions beyond the attacker's contro…

F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi

Feb 4, 2026

References

report
https://ubuntu.com/security/CVE-2026-1642