Medium 2 vendors · 2 advisories

CVE-2026-28753

Unified cross-vendor view: this CVE is referenced by 2 tracked vendors. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

F51 advisory

Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of CRLF s…Mar 24, 2026

Linux1 advisory

Low3.7NGINX Plus and NGINX Open Source: Request manipulation via header injection in SMTP upstream requestsMar 24, 2026