CVE-2026-93479

Name of the Vulnerable Software and Affected Versions NGINX Plus (affected versions not specified) NGINX Open Source (affected versions not specified)

Description An issue occurs when a map directive utilizes regex matching and the root directive or access log format references the map's regex capture variables before the map output variable. This can also be triggered by using a non-cacheable variable in a string expression under specific conditions. An unauthenticated attacker can send crafted HTTP requests to cause a heap buffer overflow in the NGINX worker process, resulting in a process restart. This may lead to a denial-of-service (DoS) or potential code execution on systems where Address Space Layout Randomization (ASLR)—a security technique that randomizes memory addresses to prevent exploitation—is disabled or bypassed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.