NGINX ngx_http_v3_module Heap Buffer Overflow (CVE-2026-90439) Advisory & Fix
Security Advisory
CVE-2026-90439
Medium
F5
Affected:
- NGINX Plus 370.0 - 370.5
- NGINX Open Source 1.30.4 - 1.31.5
- NGINX Open Source 2026-lts-1 - 2026-lts-7
- NGINX Ingress Controller 5.0.0 - 5.6.2
- NGINX Gateway Fabric 2.2.2 - 2.7.3
Fixed in:
- NGINX Plus 370.6.2
- NGINX Open Source 1.31.6
- NGINX Open Source 2026-lts-1.8
- NGINX Ingress Controller 5.6.3
- NGINX Gateway Fabric 2.7.2
参照 CVE:
CVE-2026-90439 · 6.5
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档