NGINX vulnerability CVE-2026-1642

[flostyen]

Checklist

• Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
  • Yes
• Are you sure you're not using someone else's docker image?
  • Yes
• Have you searched for similar issues (both open and closed)?
  • Yes

Describe the bug

NGINX vulnerability CVE-2026-1642

https://my.f5.com/manage/s/article/K000159824

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response from an upstream proxied server. (CVE-2026-1642)

Nginx Fixed versions:
1.29.5
1.28.2

Nginx Proxy Manager Version
2.13.7