Finding six NGINX vulnerabilities with open models

Author: Mufeed VH (Co-founder & CEO, Winfunc) Published: July 23, 2026 Source: https://winfunc.com/research/endginx Summary Winfunc ran its autonomous vulnerability-research agent, driven by the open models GLM-5.1 and GLM-5.2 (from Z.AI), against the NGINX source tree. The scan produced six security findings carrying five CVE identifiers: two heap overflows in the HTTP/2 upstream request builders, one … Read more