Vulnerability of the ngx_http_slice_module in NGINX Plus and NGINX Open Source servers, allowing attackers to expose protected information or cause service failures.

Vulnerability in ngx_http_slice_module on NGINX Plus and Open Source can expose data or disrupt services.

Reporter	Title	Published	Views	Family All 73
FreeBSD	Angie -- multiple vulnerabilities	17 Jul 202600:00	–	freebsd
FreeBSD	nginx -- multiple vulnerabilities	15 Jul 202600:00	–	freebsd
ATTACKERKB	CVE-2026-60005	15 Jul 202615:04	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : nginx, nginx-all-modules, nginx-core (ALAS2023-2026-2008)	4 Aug 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : nginx, --advisory ALAS2NGINX1-2026-015 (ALASNGINX1-2026-015)	4 Aug 202600:00	–	nessus
Tenable Nessus	Fedora 43 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-3b93aae2d6)	29 Jul 202600:00	–	nessus
Tenable Nessus	Fedora 44 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-60fc198d3b)	23 Jul 202600:00	–	nessus
Tenable Nessus	Fedora 45 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-d1cd8e3d25)	20 Jul 202600:00	–	nessus
Tenable Nessus	FreeBSD : Angie -- multiple vulnerabilities (347fe124-8f53-11f1-9f4f-3c7c3fba4204)	4 Aug 202600:00	–	nessus
Tenable Nessus	FreeBSD : nginx -- multiple vulnerabilities (56feeac6-8263-11f1-92ba-bc24110523fe)	18 Jul 202600:00	–	nessus

Vulners

Node

nginx nginx_plusRange37.0.0.1–37.0.3.1

nginx nginx_ingress_controllerRange2026-lts-r1–2026-lts-r4

Source	Link
my	www.my.f5.com/manage/s/article/K000162097
1275	www.1275.ru/vulnerability/vyshel-patch-dlya-nginx-tri-kriticheskie-uyazvimosti-zakryty-v-versiyah-1-30-4-i-1-31-3_32184
habr	www.habr.com/ru/news/1062096/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

04 Aug 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 38.2

CVSS 28.5

EPSS0.0071