Memory disclosure when using ngx_http_slice_module

🗓️ 15 Jul 2026 15:04:21Reported by NginxType

Memory disclosure in ngx_http_slice_module (CVE-2026-60005); vulnerable versions 1.15.8 through 1.31.2.

Reporter	Title	Published	Views	Family All 72
FreeBSD	Angie -- multiple vulnerabilities	17 Jul 202600:00	–	freebsd
FreeBSD	nginx -- multiple vulnerabilities	15 Jul 202600:00	–	freebsd
ATTACKERKB	CVE-2026-60005	15 Jul 202615:04	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : nginx, nginx-all-modules, nginx-core (ALAS2023-2026-2008)	4 Aug 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : nginx, --advisory ALAS2NGINX1-2026-015 (ALASNGINX1-2026-015)	4 Aug 202600:00	–	nessus
Tenable Nessus	Fedora 43 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-3b93aae2d6)	29 Jul 202600:00	–	nessus
Tenable Nessus	Fedora 44 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-60fc198d3b)	23 Jul 202600:00	–	nessus
Tenable Nessus	Fedora 45 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-d1cd8e3d25)	20 Jul 202600:00	–	nessus
Tenable Nessus	FreeBSD : Angie -- multiple vulnerabilities (347fe124-8f53-11f1-9f4f-3c7c3fba4204)	4 Aug 202600:00	–	nessus
Tenable Nessus	FreeBSD : nginx -- multiple vulnerabilities (56feeac6-8263-11f1-92ba-bc24110523fe)	18 Jul 202600:00	–	nessus

Vulners

Node

f5 nginxRange1.15.8–1.31.2

Source	Link
my	www.my.f5.com/manage/s/article/K000162100

15 Jul 2026 15:04Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.18.2

CVSS 48.8

EPSS0.0071

SSVC