CVE-2026-60005
published 2026-07-15CVE-2026-60005: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured…
PriorityP353high8.2CVSS 3.1
AVNACLPRNUINSUCLINAH
EPSS
0.71%
51.2th percentile
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX worker process, leading to limited disclosure of memory or a restart.
Impact:
This vulnerability may allow remote, unauthenticated attackers to have limited control to disclose memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.
Note: The ngx_http_slice_module module is not enabled by default; it's enabled with the --with-http_slice_module configuration parameter.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected
32 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | nginx_gateway_fabric | 1.3.0 – 1.6.2 | — |
| f5 | nginx_gateway_fabric | >= 2.0.0 < 2.6.7 | 2.6.7 |
| f5 | nginx_ingress_controller | — | — |
| f5 | nginx_ingress_controller | — | — |
| f5 | nginx_ingress_controller | >= 2026-lts-r1 < 2026-lts-r4 | 2026-lts-r4 |
| f5 | nginx_ingress_controller | 3.5.0 – 3.7.2 | — |
| f5 | nginx_ingress_controller | >= 5.0.0 < 5.5.3 | 5.5.3 |
| f5 | nginx_instance_manager | >= 2.17.0 < 2.22.2 | 2.22.2 |
| f5 | nginx_open_source | — | — |
| f5 | nginx_open_source | >= 1.15.8 < 1.30.4 | 1.30.4 |
| f5 | nginx_open_source | >= 1.30.0 < 1.30.4 | 1.30.4 |
| f5 | nginx_open_source | >= 1.31.2 < 1.31.3 | 1.31.3 |
| f5 | nginx_plus | — | — |
| f5 | nginx_plus | — | — |
| f5 | nginx_plus | — | — |
| f5 | nginx_plus | — | — |
| f5 | nginx_plus | — | — |
| f5 | nginx_plus | — | — |
| f5 | nginx_plus | — | — |
| f5 | nginx_plus | — | — |
| f5 | nginx_plus | — | — |
| f5 | nginx_plus | >= 37.0.0.1 < 37.0.3.1 | 37.0.3.1 |
| f5 | nginx_plus | >= R33 < * | * |
| f5 | nginx_plus | >= R36 < R36 P7 | R36 P7 |
| f5 | nginx_plus | >= r33 < r36 | r36 |
CVSS provenance
nvdv3.18.2HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
nvdv4.08.8HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_redhat8.2HIGH
vendor_ubuntu8.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
F5 NGINX Plus/NGINX Open Source ngx_http_slice_module uninitialized pointer (Nessus ID 327771 / WID-SEC-2026-2383)
vuldb·2026-08-07·CVSS 8.2
CVE-2026-60005 [HIGH] F5 NGINX Plus/NGINX Open Source ngx_http_slice_module uninitialized pointer (Nessus ID 327771 / WID-SEC-2026-2383)
A vulnerability classified as critical was found in F5 NGINX Plus and NGINX Open Source. Affected by this vulnerability is an unknown functionality of the component ngx_http_slice_module. The manipulation results in uninitialized pointer.
This vulnerability is reported as CVE-2026-60005. The attack can be launched remotely. No exploit exists.
GHSA
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module.
ghsa_unreviewed·2026-07-15
CVE-2026-60005 [HIGH] CWE-908 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module.
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX worker process, leading to limited disclosure of memory or a restart.
Impact:
This vulnerability may allow remote, unauthenticated attackers to have limited control to disclose memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.
Note: The ngx_http_slice_module module is not enabled by default; it's enabled with the --with-http_slice_module configuration parameter.
Note: Software versions which have reached End of Technical
Ubuntu
nginx vulnerability
vendor_ubuntu·2026-08-19·CVSS 8.1
CVE-2026-42533 [HIGH] nginx vulnerability
Title: nginx vulnerability
Summary: A security issue was fixed in nginx.
USN-8563-1 fixed vulnerabilities in nginx. The fix for CVE-2026-42533 was
backed out in USN-8563-2 because it could cause a regression. This update
includes a better fix for CVE-2026-42533.
We apologize for the inconvenience.
Original advisory details:
It was discovered that nginx incorrectly handled certain map directives
using regex matching and capture variables. A remote attacker could use
this issue to cause nginx to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2026-42533)
It was discovered that nginx had a use-after-free vulnerability in the
ngx_http_ssi_module module when configured with Server-Side Includes,
proxy_pass, and proxy buffering disabled directives. An atta
Ubuntu
nginx regression
vendor_ubuntu·2026-08-19·CVSS 8.1
CVE-2026-42533 [HIGH] nginx regression
Title: nginx regression
Summary: USN-8563-3 introduced a regression in nginx
USN-8563-3 fixed a vulnerability in nginx. The fix introduced a regression
in certain environments. This update reverts the fix for CVE-2026-42533
pending further investigation.
We apologize for the inconvenience.
Original advisory details:
It was discovered that nginx incorrectly handled certain map directives
using regex matching and capture variables. A remote attacker could use
this issue to cause nginx to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2026-42533)
It was discovered that nginx had a use-after-free vulnerability in the
ngx_http_ssi_module module when configured with Server-Side Includes,
proxy_pass, and proxy buffering disabled directives. An attacker abl
Ubuntu
nginx vulnerabilities
vendor_ubuntu·2026-07-20·CVSS 8.1
CVE-2026-56434 [HIGH] nginx vulnerabilities
Title: nginx vulnerabilities
Summary: Several security issues were fixed in nginx.
It was discovered that nginx incorrectly handled certain map directives
using regex matching and capture variables. A remote attacker could use
this issue to cause nginx to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2026-42533)
It was discovered that nginx had a use-after-free vulnerability in the
ngx_http_ssi_module module when configured with Server-Side Includes,
proxy_pass, and proxy buffering disabled directives. An attacker able to
intercept traffic and control responses from an upstream server could
possibly use this issue to cause nginx to crash, resulting in a denial of
service. (CVE-2026-56434)
It was discovered that nginx incorrectly handled certain reque
Ubuntu
nginx regression
vendor_ubuntu·2026-07-20·CVSS 8.1
CVE-2026-42533 [HIGH] nginx regression
Title: nginx regression
Summary: USN-8563-1 introduced a regression in nginx
USN-8563-1 fixed vulnerabilities in nginx. One of the fixes introduced ABI
changes that could cause issues with external modules. This update reverts
the fix for CVE-2026-42533 pending further investigation.
We apologize for the inconvenience.
Original advisory details:
It was discovered that nginx incorrectly handled certain map directives
using regex matching and capture variables. A remote attacker could use
this issue to cause nginx to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2026-42533)
It was discovered that nginx had a use-after-free vulnerability in the
ngx_http_ssi_module module when configured with Server-Side Includes,
proxy_pass, and proxy buffering disabl
Red Hat
nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module
vendor_redhat·2026-07-15·CVSS 8.2
CVE-2026-60005 [HIGH] CWE-824 nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module
nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module
A vulnerability in the NGINX ngx_http_slice_module allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash.
Statement: Important: This vulnerability in NGINX's `ngx_http_slice_module` could lead to memory disclosure or denial of service. The impact on Red Hat products is reduced because the `ngx_http_slice_module` is not enabled by default. Exploitation requires explicit configuration of the module with the `slice` directive and unnamed regex captures, or during a background cache update, limiting exposure in typical deployme
F5
CVE-2026-60005: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module
vendor_f5·2026-07-15·CVSS 8.2
CVE-2026-60005 [HIGH] CWE-908 CVE-2026-60005: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module
CVE-2026-60005: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX worker process, leading to limited disclosure of memory or a restart.
Impact:
This vulnerability may allow remote, unauthenticated attackers to have limited control to disclose memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.
Note: The ngx_http_slice_module module is not enabled by default; it's enabled with the --wi
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-60005 nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module [fedora-all]
bugzilla·2026-07-28·CVSS 8.2
CVE-2026-60005 [HIGH] CVE-2026-60005 nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module [fedora-all]
CVE-2026-60005 nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX worker process, leading to limited disclosure of memory or a restart.
Impact:
This vulnerability may allow remote, unauthenticated attackers to have limited control
Bugzilla
CVE-2026-60005 nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module
bugzilla·2026-07-15·CVSS 8.2
CVE-2026-60005 [HIGH] CVE-2026-60005 nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module
CVE-2026-60005 nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX worker process, leading to limited disclosure of memory or a restart.
Impact:
This vulnerability may allow remote, unauthenticated attackers to have limited control to disclose memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.
Note: The ngx_http_slice_module module is not enabled by default; it's enabled with the --with-http_slic
Hackernews
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More
blogs_hackernews·2026-07-20·CVSS 5.9
CVE-2026-63030 [MEDIUM] ⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## ⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More
A single request should not be able to do this much. But this week, small inputs led to code execution, memory loss, stolen keys, and disabled security tools.
The paths were often simple: exposed systems, weak checks, old drivers, fake prompts, and public code used for malware delivery. Some bugs were new. Others were already being used before defenders had time to patch.
Here is the full recap of what broke, what was exploited, and what needs attention now.
## ⚡ Threat of the Week
New wp2shell WordPress Core Flaw Lets Unauthe
2026-07-15
Published