CVE-2026-66362

Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the Authentication Filter Custom Resource Definition clientID or cookieName fields, or in the clientSecret field of a Secret referenced by an Authentication Filter, are rendered directly into NGINX configuration templates without sanitization or escaping. Impact: An authenticated attacker with permission to create or modify these resources may craft values that inject arbitrary NGINX configuration directives. This is a control plane issue; there is no data plane exposure.

• CWE-76

• https://my.f5.com/manage/s/article/K000162600

Published

Sep 2, 2026

Last Modified

Sep 3, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-6635A security vulnerability has been detected in rowboatlabs ro…7.3
• CVE-2026-66353Improper Neutralization of Input During Web Page Generation …5.3
• CVE-2026-66357httpd has never implemented obs-fold (RFC 2616 §2.2 / RFC 72…8.3
• CVE-2026-66358A cross-site scripting vulnerability exists in acmailer, whi…5.1
• CVE-2026-6636A vulnerability was detected in p2r3 convert up to 6998584ac…4.3
• CVE-2026-66360The ISO Presentation layer contains a flaw in the handling o…7.5
• CVE-2026-66364The GOOSE payload parser contains a boundary handling flaw t…6.5
• CVE-2026-66369The GOOSE parser contains an off-by-one boundary-handling fl…6.5
• CVE-2026-6637Stack buffer overflow in PostgreSQL module "refint" allows a…8.8
• CVE-2026-66370URL Redirection to Untrusted Site ('Open Redirect') vulnerab…6.1
• CVE-2026-66372The affected products use insufficiently random values, whic…6.8
• CVE-2026-66373Redis before 8.8.0, in the unusual case where an authenticat…7.5