CVE-2026-60005

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-60005
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-60005.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-60005
Aliases
Downstream
ALPINE (1)
BELL (1)
CGA (7)
DEBIAN (1)
ECHO (1)
MGASA (1)
MINI (6)
OESA (1)
openSUSE (1)
RHSA (6)
RLSA (5)
ROOT (5)
UBUNTU (1)
Related
ALSA (5)
CGA (1)
openSUSE (1)
Published
2026-07-15T16:16:49Z
Modified
2026-09-01T12:55:50Z
Severity
  • 8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVSS Calculator
Summary
[none]
Details

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX worker process, leading to limited disclosure of memory or a restart.

Impact: This vulnerability may allow remote, unauthenticated attackers to have limited control to disclose memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only. Note: The ngx_http_slice_module module is not enabled by default; it's enabled with the --with-http_slice_module configuration parameter.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:long-term_support:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "3.5.0"
                },
                {
                    "last_affected": "3.7.2"
                },
                {
                    "introduced": "5.0.0"
                },
                {
                    "fixed": "5.5.3"
                },
                {
                    "introduced": "2026-lts-r1"
                },
                {
                    "fixed": "2026-lts-r4"
                }
            ],
            "source": "CPE_RANGE",
            "vendor_product": "f5:nginx_ingress_controller"
        },
        {
            "cpes": [
                "cpe:2.3:a:f5:nginx_instance_manager:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "2.17.0"
                },
                {
                    "fixed": "2.22.2"
                }
            ],
            "source": "CPE_RANGE",
            "vendor_product": "f5:nginx_instance_manager"
        },
        {
            "cpes": [
                "cpe:2.3:a:f5:nginx_plus:*:*:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_plus:*:*:*:*:long-term_support:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "37.0.0.1"
                },
                {
                    "fixed": "37.0.3.1"
                },
                {
                    "introduced": "r33"
                },
                {
                    "fixed": "r36"
                }
            ],
            "source": "CPE_RANGE",
            "vendor_product": "f5:nginx_plus"
        },
        {
            "cpes": [
                "cpe:2.3:a:f5:waf:*:*:*:*:*:nginx:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "4.11.0"
                },
                {
                    "last_affected": "4.16.0"
                },
                {
                    "introduced": "5.2.0"
                },
                {
                    "last_affected": "5.8.0"
                },
                {
                    "introduced": "5.9.0"
                },
                {
                    "fixed": "5.13.4"
                }
            ],
            "source": "CPE_RANGE",
            "vendor_product": "f5:waf"
        },
        {
            "cpes": [
                "cpe:2.3:a:f5:nginx_ingress_controller:4.0.0:*:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_ingress_controller:4.0.1:*:*:*:continuous_releases:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "4.0.0"
                },
                {
                    "last_affected": "4.0.0"
                },
                {
                    "introduced": "4.0.1"
                },
                {
                    "last_affected": "4.0.1"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "f5:nginx_ingress_controller"
        },
        {
            "cpes": [
                "cpe:2.3:a:f5:nginx_plus:r36:-:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_plus:r36:p1:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_plus:r36:p2:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_plus:r36:p3:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_plus:r36:p4:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_plus:r36:p5:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_plus:r36:p6:*:*:continuous_releases:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "r36-NA"
                },
                {
                    "last_affected": "r36-NA"
                },
                {
                    "introduced": "r36-p1"
                },
                {
                    "last_affected": "r36-p1"
                },
                {
                    "introduced": "r36-p2"
                },
                {
                    "last_affected": "r36-p2"
                },
                {
                    "introduced": "r36-p3"
                },
                {
                    "last_affected": "r36-p3"
                },
                {
                    "introduced": "r36-p4"
                },
                {
                    "last_affected": "r36-p4"
                },
                {
                    "introduced": "r36-p5"
                },
                {
                    "last_affected": "r36-p5"
                },
                {
                    "introduced": "r36-p6"
                },
                {
                    "last_affected": "r36-p6"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "f5:nginx_plus"
        }
    ]
}
References

Affected packages

Git / github.com/nginx/nginx

Affected ranges

Type
GIT
Repo
https://github.com/nginx/nginx
Events
Introduced
6e14e954aaacce9a433d9b07b4653809c7594ab8
Fixed
017cf98dcce217946572a896f0992370475e189f
Introduced
2fd01ed47a1fd2965754c83f53b33a789d0e07f1
Last Affected
2fd01ed47a1fd2965754c83f53b33a789d0e07f1
Database specific
Show details 
{
    "cpe": [
        "cpe:2.3:a:f5:nginx_open_source:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:f5:nginx_open_source:1.31.2:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "1.30.0"
        },
        {
            "fixed": "1.30.4"
        },
        {
            "introduced": "1.31.2"
        },
        {
            "last_affected": "1.31.2"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

1.*
1.31.2
release-1.*
release-1.30.0
release-1.30.1
release-1.30.2
release-1.30.3
release-1.31.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-60005.json"

Git / github.com/nginx/nginx-gateway-fabric

Affected ranges

Type
GIT
Repo
https://github.com/nginx/nginx-gateway-fabric
Events
Introduced
3a372747333fb1db372af7cf0b18ed7eef7c91f7
Last Affected
532db6a20b2912fe397211eef9f8d564d46a4bdd
Introduced
7dad8b31e3f0c3eadce36fed8c276e83e6583d24
Fixed
5e34a17a8f7787e90f41d1af91258a556f0795b4
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:f5:nginx_gateway_fabric:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.3.0"
        },
        {
            "last_affected": "1.6.2"
        },
        {
            "introduced": "2.0.0"
        },
        {
            "fixed": "2.6.7"
        }
    ],
    "source": "CPE_RANGE"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-60005.json"