CVE-2026-56434 | F5 NGINX Plus/NGINX Open Source SSI Module heap-based overflow

A vulnerability labeled as critical has been found in F5 NGINX Plus and NGINX Open Source. Affected by this issue is some unknown functionality of the component SSI Module. Executing a manipulation can lead to heap-based buffer overflow.

This vulnerability is registered as CVE-2026-56434. It is possible to launch the attack remotely. No exploit is available.