Five NGINX flaws: 313M fingerprinted hosts, but zero CVE matches

A single NGINX release patched five vulnerabilities, each gated by a specific configuration directive. A ZoomEye query for app="nginx" returns 313,643,589 assets, but that counts product fingerprints, not vulnerable servers; a query for CVE-2026-15176 returned zero.

• Patched versions are NGINX 1.30.6 and 1.31.7
• CVE-2026-15176 query returned zero indexed assets
• Affected ranges span 0.1.29 to 1.31.6 depending on the flaw
• Per-host configuration check is the nginx -T command