Connect With an Expert: 888-985-8971
Zultys Security Advisory Notice - SAN26-006 Rev 1.0
Vulnerability in NGINX ngx_http_ssl_module (CVE-2026-40701)
Evaluated Products
MX-SE, MX-SE II, MX-E and MX-Virtual systems
Impacted Products
None
Affected Releases
Not applicable
Impacted 3rd Party Products
Not applicable
Introduction
On May 13, 2026 details of a vulnerability in the NGINX ngx_http_ssl_module was published in the CVE Vulnerability Database under CVE-2026-40701.
The vulnerability may allow an unauthenticated attacker to send requests that cause a heap-use-after-free error in NGINX worker process.
Description
Zultys have evaluated the reported vulnerability and confirmed that the MX-SE, MX-SE II, MX-E and MX-Virtual products are not impacted.
Contact
If additional information is required contact support@zultys.com or your Authorized Zultys Channel Partner.
