Vendor

nginx

In 9 briefs, most recently 19 October 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Coverage in DanSec Daily

  1. ConnectWise cloud outage, ETS breach exposing millions of California student records, and OpenCode legacy breach exposing stored AI API keys.
  2. BeyondTrust zero-day exploited by Armory Castle, PwnEscape Linux VM escape flaw, and BAE Systems attack disrupting US bankruptcy court notices.
  3. Hugging Face breach tied to an autonomous AI agent, SonicWall SMA 1000 zero-days giving root access, and WP2Shell WordPress flaws exploited in the wild.
  4. Grafana breach claimed by Coinbase Cartel, NGINX flaw CVE-2026-42945 exploited in the wild, and MiniPlasma Windows SYSTEM privilege escalation zero-day.
  5. Grafana GitHub token breach, Canvas ransomware, and active WordPress Funnel Builder exploitation.
  6. Foxconn ransomware by Nitrogen, OpenAI breach via TanStack supply chain attack, and Cisco SD-WAN zero-day CVE-2026-20182 exploited in the wild.
  7. The Foxconn ransomware breach, Fragnesia Linux kernel root exploit, and NGINX unauthenticated RCE flaw, plus Microsoft's May Patch Tuesday fixes.
  8. Ukrainian targeting by UAC-0247's AgingFly malware, a compromised WordPress EssentialPlugin package, and an nginx-ui flaw exploited in the wild …
  9. Mexican government breach claim, Notepad++ update hijacking distributing a backdoor, and a critical n8n flaw allowing host takeover.