UpHeron
All vulnerabilities

Servers and applications

CVE-2026-60005

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX worker process, leading to limited disclosure of memory or a restart. Impact: This vulnerability…

Severity
High 8.8
Published
15 Jul 2026
Last changed
11 Aug 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.30.4
Sources
NVD

Affected software

SoftwareAffected versions
nginxServers and applications · cpe:a:f5:nginx_open_source
  • From 1.30.0 before 1.30.4
  • Version 1.31.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-60005
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-60005