Technical Analysis by CVE

• CVSSv3.1 8.1 (High Severity)
• Deep Security/SWP: Based on the analysis of the vulnerability by the TrendAI development team, it has been confirmed that SWP/Deep Security is not affected or impacted by this vulnerability because although the product uses NGINX, TrendAI's configuration does not use the affected rewrite/if/set directives with $N capture references. Even though the product is not affected by this particular vulnerability, the NGINX components are scheduled to be updated in the June 2026 Deep Security Agent (DSA).
• Endpoint Basecamp: Based on the analysis of the vulnerability by the TrendAI development team, it has been confirmed that Endpoint Basecamp is not affected or impacted by this vulnerability because the specific conditions required to trigger the vulnerability do not exist in the product configuration.  Even though the product is not affected by this particular vulnerability, the NGINX components are scheduled to be updated in the July Basecamp as part of a pre-scheduled refresh.