It was discovered that nginx incorrectly handled certain configurationsusing the alias directive together with rewrite rules. A remote attackercould possibly use this issue to cause nginx to crash, resulting in adenial of service, or execute arbitrary code.(CVE-2026-15176)It was discovered that nginx incorrectly handled map directives usingregex matching under certain circumstances. A remote attacker couldpossibly use this issue to cause nginx to crash, resulting in a denialof service, or execute arbitrary code.(CVE-2026-93479)It was discovered that nginx incorrectly handled HTTP/3 requests whenproxy_request_buffering was enabled. This issue only affectedUbuntu 26.04 LTS and Ubuntu 26.10. A remote attacker could possibly usethis issue to inject data into proxied requests.(CVE-2026-95101)It was discovered that nginx incorrectly handled asynchronous file I/Oin certain configurations with Server Side Includes pages. A remoteattacker could possibly use this issue to cause nginx to crash,resulting in a denial of service, or execute arbitrary code.(CVE-2026-97205)It was discovered that nginx incorrectly handled SSL session ticket keyswhen configured with a shared session cache but without explicit ticketkey rotation. This issue only affected Ubuntu 24.04 LTS, Ubuntu 26.04 LTS,and Ubuntu 26.10. A remote attackercould possibly use this issue to forge client SSL sessions and bypassclient certificate verification.(CVE-2026-97629)