Scan free

Incidents

Security Incidents, Live

What Is Exploited Now, And What Fixes It.

Live incidents worldwide: the CVE, whether a patch exists, the versions that fix it and the reports behind it. Updated through the day from pwn.watch.

Scan your code for what attackers use →
Sekura — owl-in-shield mark

Live

Exploited and disclosed, latest first

Each incident names its severity, its patch status and the fixed versions. Open the updates for the dated timeline and its sources.

MediumclosedPatch: patched

nginx 1.31.7 / 1.30.6 security fixes (HTTP/3, TLS tickets, overflows)

nginx published multiple medium/major advisories fixed in 1.31.7+ and 1.30.6+, including HTTP/3 request-body injection (CVE-2026-95101), TLS session-ticket forgery (CVE-2026-97629), AIO use-after-free (CVE-2026-97205), and buffer overflows in alias/rewrite and map/regex paths. Same-day chatter bundled this with the PHP/Node/GitLab rush for anyone terminating HTTP on nginx.

Fixed in
1.31.7+, 1.30.6+
Latest updates (3)
  • 2026-10-21: Security advisories and patched releases published on nginx.org.
  • 2026-10-21: nginx 1.31.8 mainline released. (source)
  • 2026-10-14: nginx 1.30.6 stable and 1.31.7 mainline released with fixes for CVE-2026-15176, -93479, -95101, -97629, -97205; njs 1.0.2 fixes CVE-2026-101025. (source)

Full timeline on pwn.watch →

Incident data from pwn.watch, updated October 23, 2026, 20:28 UTC. Summaries are pwn.watch's; Sekura did not verify them.