Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 494
Alerts This Week
Warning Icon 1 494

Debian DSA-6131-1 Nginx Important Man-in-the-Middle Risk CVE-2026-1642

debian
Calendar Grey February 12, 2026
Scroller Debian
Nginx vulnerability in Debian exposes to man-in-the-middle attack; apply fixes to safeguard communication.
A vulnerability has been discovered in Nginx, a high-performance web and reverse proxy server: If configured to proxy to an upstream TLS server, a man-in-the-middle injection attac...
Topics%20covered

Topics Covered

security advisory debian important man-in-the-middle nginx injection

Summary

For the oldstable distribution (bookworm), this problem has been fixed
in version 1.22.1-9+deb12u4.

For the stable distribution (trixie), this problem has been fixed in
version 1.26.3-3+deb13u2.

We recommend that you upgrade your nginx packages.

For the detailed security status of nginx please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/nginx

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
important
Lowest
Low
Medium
High
Critical

Package: nginx
CVE ID: CVE-2026-1642

Topics%20covered

Topics Covered

security advisory debian important man-in-the-middle nginx injection

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.