lucasdillmann

Products

ProductCVEsExploitedLatest
nginx-ignition3–Sep 21, 2026

Exploited and recent CVEs

  • CVE-2026-61628 High 8.1 nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition 0.4%
  • CVE-2026-61629 High 7.5 nginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware 0.4%
  • CVE-2026-61630 Medium 4.2 nginx ignition has TOTP Reuse During Validity Window 0.4%