UBUNTU-CVE-2026-40460
- Source
- https://ubuntu.com/security/CVE-2026-40460
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-40460.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-40460
- Upstream
- Downstream
- Related
- Published
- 2026-05-13T16:16:00Z
- Modified
- 2026-06-01T19:00:23Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L CVSS Calculator
- 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
- References
Affected packages
Ubuntu:25.10 / nginx
Package
- Name
- nginx
- Purl
- pkg:deb/ubuntu/nginx?arch=source&distro=questing
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.28.0-6ubuntu1.4
Affected versions
1.*
1.26.3-2ubuntu1
1.26.3-3ubuntu1
1.26.3-3ubuntu2
1.26.3-3ubuntu3
1.28.0-3ubuntu1
1.28.0-4ubuntu1
1.28.0-6ubuntu1
1.28.0-6ubuntu1.1
1.28.0-6ubuntu1.2
1.28.0-6ubuntu1.3
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libnginx-mod-http-geoip",
"binary_version": "1.28.0-6ubuntu1.4"
},
{
"binary_name": "libnginx-mod-http-image-filter",
"binary_version": "1.28.0-6ubuntu1.4"
},
{
"binary_name": "libnginx-mod-http-perl",
"binary_version": "1.28.0-6ubuntu1.4"
},
{
"binary_name": "libnginx-mod-http-xslt-filter",
"binary_version": "1.28.0-6ubuntu1.4"
},
{
"binary_name": "libnginx-mod-mail",
"binary_version": "1.28.0-6ubuntu1.4"
},
{
"binary_name": "libnginx-mod-stream",
"binary_version": "1.28.0-6ubuntu1.4"
},
{
"binary_name": "libnginx-mod-stream-geoip",
"binary_version": "1.28.0-6ubuntu1.4"
},
{
"binary_name": "nginx",
"binary_version": "1.28.0-6ubuntu1.4"
},
{
"binary_name": "nginx-common",
"binary_version": "1.28.0-6ubuntu1.4"
},
{
"binary_name": "nginx-core",
"binary_version": "1.28.0-6ubuntu1.4"
},
{
"binary_name": "nginx-extras",
"binary_version": "1.28.0-6ubuntu1.4"
},
{
"binary_name": "nginx-full",
"binary_version": "1.28.0-6ubuntu1.4"
},
{
"binary_name": "nginx-light",
"binary_version": "1.28.0-6ubuntu1.4"
}
]
}
Ubuntu:26.04:LTS / nginx
Package
- Name
- nginx
- Purl
- pkg:deb/ubuntu/nginx?arch=source&distro=resolute
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.28.3-2ubuntu1.2
Affected versions
1.*
1.28.0-6ubuntu1
1.28.1-2ubuntu1
1.28.1-3ubuntu1
1.28.2-2ubuntu1
1.28.3-2ubuntu1
1.28.3-2ubuntu1.1
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libnginx-mod-http-geoip",
"binary_version": "1.28.3-2ubuntu1.2"
},
{
"binary_name": "libnginx-mod-http-image-filter",
"binary_version": "1.28.3-2ubuntu1.2"
},
{
"binary_name": "libnginx-mod-http-perl",
"binary_version": "1.28.3-2ubuntu1.2"
},
{
"binary_name": "libnginx-mod-http-xslt-filter",
"binary_version": "1.28.3-2ubuntu1.2"
},
{
"binary_name": "libnginx-mod-mail",
"binary_version": "1.28.3-2ubuntu1.2"
},
{
"binary_name": "libnginx-mod-stream",
"binary_version": "1.28.3-2ubuntu1.2"
},
{
"binary_name": "libnginx-mod-stream-geoip",
"binary_version": "1.28.3-2ubuntu1.2"
},
{
"binary_name": "nginx",
"binary_version": "1.28.3-2ubuntu1.2"
},
{
"binary_name": "nginx-common",
"binary_version": "1.28.3-2ubuntu1.2"
},
{
"binary_name": "nginx-core",
"binary_version": "1.28.3-2ubuntu1.2"
},
{
"binary_name": "nginx-extras",
"binary_version": "1.28.3-2ubuntu1.2"
},
{
"binary_name": "nginx-full",
"binary_version": "1.28.3-2ubuntu1.2"
},
{
"binary_name": "nginx-light",
"binary_version": "1.28.3-2ubuntu1.2"
}
]
}