CVE-2026-95101

Name of the Vulnerable Software and Affected Versions NGINX Plus (affected versions not specified) NGINX Open Source (affected versions not specified)

Description A flaw exists in the ngx http v3 module module. When HTTP/3 is used in conjunction with the proxy request buffering directive set to on, an unauthenticated remote attacker can inject data into the proxied request. This is a data plane issue and does not expose the control plane.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, disable the proxy request buffering directive when using HTTP/3.