lucasdillmann
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| nginx-ignition | 3 | – | Sep 21, 2026 |
Exploited and recent CVEs
- CVE-2026-61628 nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition 0.4%
- CVE-2026-61629 nginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware 0.4%
- CVE-2026-61630 nginx ignition has TOTP Reuse During Validity Window 0.4%