Metraipolis › archive › dc_dbfa67cfa31e

CVE-2026-19670: Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /ht...

Source
Metraipolis archive
Original
https://nvd.nist.gov/vuln/detail/CVE-2026-19670
License (as archived)
solo-consultazione
Archived
2026-10-21T00:24:04.026Z
SHA-256 of the archived text
b546be2654a552890af5ecd924578b65b5e763261a8e58004cd347032f13642d
Stable URL of this page
https://metraipolis.com/documento/dc_dbfa67cfa31e

How to cite

CVE-2026-19670: Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /ht... — Metraipolis archive, https://nvd.nist.gov/vuln/detail/CVE-2026-19670 (solo-consultazione); archived copy: https://metraipolis.com/documento/dc_dbfa67cfa31e (Metraipolis archive dc_dbfa67cfa31e, sha256 b546be2654a552890af5ecd924578b65b5e763261a8e58004cd347032f13642d)
BibTeX
@misc{dcdbfa67cfa31e,
  title = {CVE-2026-19670: Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /ht...},
  howpublished = {Metraipolis archive},
  url = {https://nvd.nist.gov/vuln/detail/CVE-2026-19670},
  note = {License solo-consultazione; archived copy https://metraipolis.com/documento/dc_dbfa67cfa31e; sha256 b546be2654a552890af5ecd924578b65b5e763261a8e58004cd347032f13642d},
  year = {2026}
}

Archived text

The text is not reproduced here: the archive holds it as solo-consultazione (consultation only, no republication). Read it at the original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19670. Agents can read the archived copy with the MCP tool read_document.