VDB
CVE-2026-60005
CVE-2026-60005
PUBLISHED
CVSS 8.699999809265137 HIGH
NGINX Plus ist die kommerzielle Variante von NGINX, einer Webserver-, Reverse Proxy- und E-Mail Proxy Software.
EPSS 0.71% · 50.1th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.71%
50.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| NGINX | NGINX NGINX Plus <37.0.3.1 | |
| Fedora | Fedora Linux | |
| NGINX | NGINX NGINX Plus <R36 P7 | |
| SUSE | SUSE Linux | |
| Red Hat | Red Hat Enterprise Linux | |
| Amazon | Amazon Linux 2 | |
| Ubuntu | Ubuntu Linux | |
| SUSE | SUSE openSUSE |
Timeline
- Jul 15, 2026 Coalition ESS Score
- Jul 15, 2026 CVE Published
- Aug 7, 2026 EPSS Score
- Aug 11, 2026 CVE Updated
- Aug 12, 2026 Distribution Patch
- Aug 12, 2026 Distribution Patch
- Aug 12, 2026 Distribution Patch
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:46012 advisory
- https://github.com/DepthFirstDisclosures/Nginx-Rift/blob/main/CVE-2026-42533/report.md exploit
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2383.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2383 advisory
- https://github.com/advisories/GHSA-fxfg-v4rj-hp95 advisory
- https://github.com/advisories/GHSA-M73P-XG7Q-M8F2 advisory
- https://github.com/advisories/GHSA-W94H-5QPM-994V advisory
- https://github.com/advisories/GHSA-VXCV-H5WJ-JXR5 advisory
- https://my.f5.com/manage/s/article/K000162097 advisory
- https://my.f5.com/manage/s/article/K000162098 advisory
- https://my.f5.com/manage/s/article/K000162100 advisory
- https://my.f5.com/manage/s/article/K000162101 advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LIWPH3EULRVLC6TMLBZYPJ5IKQGVF6C2/ advisory
- https://ubuntu.com/security/notices/USN-8563-2 advisory
- https://ubuntu.com/security/notices/USN-8563-1 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2026-d1cd8e3d25 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2026-60fc198d3b advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2026-3b93aae2d6 advisory
- https://cyberstan.co.uk/nginx-rce/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2026-August/028116.html advisory
…and 3 more