{"metadata": {"vulnerability": "CVE-2026-93479", "count": 41, "kinds": {"milestone": 11, "sighting": 7, "kev": 0, "other": 23}}, "data": [{"timestamp": "2023-01-01T00:00:00Z", "date_only": false, "value": "2023-01-01T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / f5", "record": "CVE-2026-93479", "field": "containers.cna.datePublic"}, {"timestamp": "2026-09-30T21:56:14.601Z", "date_only": false, "value": "2026-09-30T21:56:14.601Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-93479", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1317", "record": "CERTFR-2026-AVI-1317", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1341", "record": "CERTFR-2026-AVI-1341", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-14T14:40:27.107Z", "date_only": false, "value": "2026-10-14T14:40:27.107Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-93479", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T14:40:27.107Z", "date_only": false, "value": "2026-10-14T14:40:27.107Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / f5", "record": "CVE-2026-93479", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:17:26Z", "date_only": false, "value": "2026-10-14T15:17:26Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V72Q-V4VF-2MX7", "record": "GHSA-V72Q-V4VF-2MX7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T15:17:26.810Z", "date_only": false, "value": "2026-10-14T15:17:26.810", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93479", "record": "FKIE_CVE-2026-93479", "field": "published"}, {"timestamp": "2026-10-14T15:32:30Z", "date_only": false, "value": "2026-10-14T15:32:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V72Q-V4VF-2MX7", "record": "GHSA-V72Q-V4VF-2MX7", "field": "published"}, {"timestamp": "2026-10-14T15:32:30Z", "date_only": false, "value": "2026-10-14T15:32:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V72Q-V4VF-2MX7", "record": "GHSA-V72Q-V4VF-2MX7", "field": "modified"}, {"timestamp": "2026-10-14T15:52:30.331Z", "date_only": false, "value": "2026-10-14T15:52:30.331311Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxtvplbz7y2t", "record": "CVE-2026-93479", "field": "creation_timestamp", "uuid": "11e0845c-c783-441c-a4f8-9e71eb20685a", "content": "F5 patched three NGINX vulnerabilities (CVE-2026-97205, CVE-2026-93479, CVE-2026-15176) rated 9.2 Critical in F5 NGINX Plus and Open Source. Upgrade today.\n\n#NGINX #F5Networks #CVE202697205 #CVE202693479 #CVE202615176 #Cybersecurity #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxtvplbz7y2t"}, {"timestamp": "2026-10-14T16:10:41.947Z", "date_only": false, "value": "2026-10-14T16:10:41.947834Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtwq54r4t2w", "record": "CVE-2026-93479", "field": "creation_timestamp", "uuid": "f034f8d7-bd25-4843-8aba-604e84f262ed", "content": "\ud83d\udea8 CVE-2026-93479 \u2014 CVSS 9.2 CRITICAL\n\nA vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93479\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtwq54r4t2w"}, {"timestamp": "2026-10-14T17:20:07.060Z", "date_only": false, "value": "2026-10-14T17:20:07.060989Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxu2maggi22z", "record": "CVE-2026-93479", "field": "creation_timestamp", "uuid": "e2203124-9c29-49f2-abb2-e3cf4ba7f158", "content": "CVE-2026-93479 - nginx plus\nIf an NGINX server uses a map directive with regular\u2011expression captures and then references those captures in a root or log setting, a specially crafted web request can overflow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nginxplus #f5 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxu2maggi22z"}, {"timestamp": "2026-10-14T20:17:50.894Z", "date_only": false, "value": "2026-10-14T20:17:50.894302Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441106438894364", "record": "CVE-2026-93479", "field": "creation_timestamp", "uuid": "ed539cec-4b76-4e13-94ff-f36444588d35", "content": "CVE-2026-93479 NGINX map directive and regex matching vulnerability A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable in a string expression under certain conditions. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.\nImpact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only.\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\nhttps://www.cve.org/CVERecord?id=CVE-2026-93479https://my.f5.com/manage/s/article/K000162607#F5 #NGINXPlus #NGINXOpenSource#CVE_2026_93479#bot", "url": "https://infosec.exchange/users/cve/statuses/117441106438894364"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12143-1", "record": "OPENSUSE-SU-2026:12143-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12143-1", "record": "OPENSUSE-SU-2026:12143-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12143-1", "record": "OPENSUSE-SU-2026:12143-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1317", "record": "CERTFR-2026-AVI-1317", "field": "last_revision_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1317", "record": "CERTFR-2026-AVI-1317", "field": "initial_release_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12143-1", "record": "OPENSUSE-SU-2026:12143-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-93479", "record": "UBUNTU-CVE-2026-93479", "field": "published"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1317", "record": "CERTFR-2026-AVI-1317", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-93479", "record": "UBUNTU-CVE-2026-93479", "field": "modified"}, {"timestamp": "2026-10-15T03:57:00.464Z", "date_only": false, "value": "2026-10-15T03:57:00.464550Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-93479", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T03:57:00.464Z", "date_only": false, "value": "2026-10-15T03:57:00.464550Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93479", "record": "FKIE_CVE-2026-93479", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T10:31:15.685Z", "date_only": false, "value": "2026-10-15T10:31:15.685Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-93479", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T10:31:15.685Z", "date_only": false, "value": "2026-10-15T10:31:15.685Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-93479", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T11:18:08.093Z", "date_only": false, "value": "2026-10-15T11:18:08.093", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93479", "record": "FKIE_CVE-2026-93479", "field": "lastModified"}, {"timestamp": "2026-10-16T09:51:37Z", "date_only": false, "value": "2026-10-16T09:51:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12143-1", "record": "OPENSUSE-SU-2026:12143-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-16T09:51:37Z", "date_only": false, "value": "2026-10-16T09:51:37Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12143-1", "record": "OPENSUSE-SU-2026:12143-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T13:58:03.119Z", "date_only": false, "value": "2026-10-16T13:58:03.119442Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-a29693b2-322e7ea838c0fc3e", "record": "CVE-2026-93479", "field": "creation_timestamp", "uuid": "9e95d64d-9aaf-437b-81f5-2a50c3348ff4", "content": "F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application delivery firm F5 announced fixes for eleven security issues in NGINX. Among them, critical vulnerabilities tracked as CVE-2026-15176 and CVE-2026-93479 could be exploited without authentication via crafted HTTP requests. Under certain conditions beyond their control, an [\u2026]F5 addressed critical RCE flaws in NGINX", "url": "https://poliverso.org/objects/0477a01e-a29693b2-322e7ea838c0fc3e"}, {"timestamp": "2026-10-17T01:08:05Z", "date_only": false, "value": "2026-10-17T01:08:05.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-93479", "record": "MSRC_CVE-2026-93479", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-17T01:08:05Z", "date_only": false, "value": "2026-10-17T01:08:05.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-93479", "record": "MSRC_CVE-2026-93479", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-17T01:08:05Z", "date_only": false, "value": "2026-10-17T01:08:05.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-93479", "record": "MSRC_CVE-2026-93479", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-17T01:08:05Z", "date_only": false, "value": "2026-10-17T01:08:05.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-93479", "record": "MSRC_CVE-2026-93479", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-17T07:00:38.102Z", "date_only": false, "value": "2026-10-17T07:00:38.102Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-93479", "record": "MSRC_CVE-2026-93479", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1341", "record": "CERTFR-2026-AVI-1341", "field": "last_revision_date"}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1341", "record": "CERTFR-2026-AVI-1341", "field": "initial_release_date"}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1341", "record": "CERTFR-2026-AVI-1341", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-19T02:08:55Z", "date_only": false, "value": "2026-10-19T02:08:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.dk/news/2026-10-19/F5-og-Juniper-lukker-kritiske-saarbarheder", "record": "CVE-2026-93479", "field": "creation_timestamp", "uuid": "5e30217a-6d7d-4957-b7ee-ad09cba69b87", "url": "https://www.cert.dk/news/2026-10-19/F5-og-Juniper-lukker-kritiske-saarbarheder"}, {"timestamp": "2026-10-19T06:27:50Z", "date_only": false, "value": "2026-10-19T06:27:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-heap-based-buffer-overflows-nginx-plus-and-nginx-open-source-can-be-exploited", "record": "CVE-2026-93479", "field": "creation_timestamp", "uuid": "604d6cb9-a453-4a6a-bc72-f4fb4d3c0002", "url": "https://ccb.belgium.be/advisories/warning-heap-based-buffer-overflows-nginx-plus-and-nginx-open-source-can-be-exploited"}]}