Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
Typedeb
Namespacedebian
Namenginx
Version1.18.0-6.1+deb11u6
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.20.2-2
Latest_non_vulnerable_version1.30.1-3
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-3b34-tqxp-h7h5
vulnerability_id VCID-3b34-tqxp-h7h5
summary nginx: NGINX ngx_mail_smtp_module vulnerability
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-53859.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-53859.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-53859
reference_id
reference_type
scores
0
value 0.00031
scoring_system epss
scoring_elements 0.09485
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-53859
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53859
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53859
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1111138
reference_id 1111138
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1111138
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2388238
reference_id 2388238
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2388238
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-53859
reference_id CVE-2025-53859
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2025-53859
7
reference_url https://my.f5.com/manage/s/article/K000152786
reference_id K000152786
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-13T15:06:23Z/
url https://my.f5.com/manage/s/article/K000152786
8
reference_url https://access.redhat.com/errata/RHSA-2026:8346
reference_id RHSA-2026:8346
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:8346
9
reference_url https://usn.ubuntu.com/7715-1/
reference_id USN-7715-1
reference_type
scores
url https://usn.ubuntu.com/7715-1/
fixed_packages
0
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kvpj-4273-4khg
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u3%3Fdistro=trixie
1
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u6%3Fdistro=trixie
2
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u3?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u3%3Fdistro=trixie
3
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-kvpj-4273-4khg
2
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u6%3Fdistro=trixie
4
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u4%3Fdistro=trixie
6
url pkg:deb/debian/nginx@1.28.0-3?distro=trixie
purl pkg:deb/debian/nginx@1.28.0-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.28.0-3%3Fdistro=trixie
7
url pkg:deb/debian/nginx@1.30.1-3?distro=trixie
purl pkg:deb/debian/nginx@1.30.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.1-3%3Fdistro=trixie
aliases CVE-2025-53859
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3b34-tqxp-h7h5
1
url VCID-422n-2b44-mbh2
vulnerability_id VCID-422n-2b44-mbh2
summary nginx: ngx_http_scgi_module: ngx_http_uwsgi_module: information disclosure and denial of service
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-42946.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-42946.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-42946
reference_id
reference_type
scores
0
value 0.0007
scoring_system epss
scoring_elements 0.21561
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-42946
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42946
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2477132
reference_id 2477132
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2477132
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-42946
reference_id CVE-2026-42946
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2026-42946
6
reference_url https://my.f5.com/manage/s/article/K000161027
reference_id K000161027
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L
1
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T15:55:04Z/
url https://my.f5.com/manage/s/article/K000161027
fixed_packages
0
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kvpj-4273-4khg
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u3%3Fdistro=trixie
1
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u6%3Fdistro=trixie
2
url pkg:deb/debian/nginx@1.30.0-4?distro=trixie
purl pkg:deb/debian/nginx@1.30.0-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.0-4%3Fdistro=trixie
3
url pkg:deb/debian/nginx@1.30.1-3?distro=trixie
purl pkg:deb/debian/nginx@1.30.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.1-3%3Fdistro=trixie
aliases CVE-2026-42946
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-422n-2b44-mbh2
2
url VCID-5kgu-8trw-zufv
vulnerability_id VCID-5kgu-8trw-zufv
summary nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-1642.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-1642.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-1642
reference_id
reference_type
scores
0
value 0.00021
scoring_system epss
scoring_elements 0.06124
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-1642
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1642
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1642
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1127053
reference_id 1127053
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1127053
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2436738
reference_id 2436738
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2436738
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-1642
reference_id CVE-2026-1642
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2026-1642
7
reference_url https://my.f5.com/manage/s/article/K000159824
reference_id K000159824
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-04T16:01:47Z/
url https://my.f5.com/manage/s/article/K000159824
8
reference_url https://access.redhat.com/errata/RHSA-2026:10065
reference_id RHSA-2026:10065
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:10065
9
reference_url https://access.redhat.com/errata/RHSA-2026:3638
reference_id RHSA-2026:3638
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:3638
10
reference_url https://access.redhat.com/errata/RHSA-2026:4235
reference_id RHSA-2026:4235
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:4235
11
reference_url https://access.redhat.com/errata/RHSA-2026:4501
reference_id RHSA-2026:4501
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:4501
12
reference_url https://access.redhat.com/errata/RHSA-2026:4705
reference_id RHSA-2026:4705
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:4705
13
reference_url https://access.redhat.com/errata/RHSA-2026:4943
reference_id RHSA-2026:4943
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:4943
14
reference_url https://access.redhat.com/errata/RHSA-2026:5581
reference_id RHSA-2026:5581
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5581
15
reference_url https://access.redhat.com/errata/RHSA-2026:5599
reference_id RHSA-2026:5599
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5599
16
reference_url https://access.redhat.com/errata/RHSA-2026:6182
reference_id RHSA-2026:6182
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6182
17
reference_url https://access.redhat.com/errata/RHSA-2026:6234
reference_id RHSA-2026:6234
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6234
18
reference_url https://access.redhat.com/errata/RHSA-2026:6235
reference_id RHSA-2026:6235
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6235
19
reference_url https://access.redhat.com/errata/RHSA-2026:6302
reference_id RHSA-2026:6302
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6302
20
reference_url https://access.redhat.com/errata/RHSA-2026:6311
reference_id RHSA-2026:6311
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6311
21
reference_url https://access.redhat.com/errata/RHSA-2026:6407
reference_id RHSA-2026:6407
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6407
22
reference_url https://access.redhat.com/errata/RHSA-2026:6408
reference_id RHSA-2026:6408
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6408
23
reference_url https://access.redhat.com/errata/RHSA-2026:6427
reference_id RHSA-2026:6427
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6427
24
reference_url https://access.redhat.com/errata/RHSA-2026:8346
reference_id RHSA-2026:8346
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:8346
25
reference_url https://usn.ubuntu.com/8038-1/
reference_id USN-8038-1
reference_type
scores
url https://usn.ubuntu.com/8038-1/
fixed_packages
0
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kvpj-4273-4khg
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u3%3Fdistro=trixie
1
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u6%3Fdistro=trixie
2
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u4?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u4%3Fdistro=trixie
3
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-kvpj-4273-4khg
2
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u6%3Fdistro=trixie
4
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u2%3Fdistro=trixie
5
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u4%3Fdistro=trixie
6
url pkg:deb/debian/nginx@1.28.1-3?distro=trixie
purl pkg:deb/debian/nginx@1.28.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.28.1-3%3Fdistro=trixie
7
url pkg:deb/debian/nginx@1.30.1-3?distro=trixie
purl pkg:deb/debian/nginx@1.30.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.1-3%3Fdistro=trixie
aliases CVE-2026-1642
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5kgu-8trw-zufv
3
url VCID-cxs8-z482-ufht
vulnerability_id VCID-cxs8-z482-ufht
summary nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-32647.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-32647.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-32647
reference_id
reference_type
scores
0
value 0.00023
scoring_system epss
scoring_elements 0.06833
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-32647
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32647
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32647
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2449598
reference_id 2449598
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2449598
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-32647
reference_id CVE-2026-32647
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2026-32647
6
reference_url https://my.f5.com/manage/s/article/K000160366
reference_id K000160366
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-24T14:51:04Z/
url https://my.f5.com/manage/s/article/K000160366
7
reference_url https://access.redhat.com/errata/RHSA-2026:10065
reference_id RHSA-2026:10065
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:10065
8
reference_url https://access.redhat.com/errata/RHSA-2026:13634
reference_id RHSA-2026:13634
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:13634
9
reference_url https://access.redhat.com/errata/RHSA-2026:13680
reference_id RHSA-2026:13680
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:13680
10
reference_url https://access.redhat.com/errata/RHSA-2026:13839
reference_id RHSA-2026:13839
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:13839
11
reference_url https://access.redhat.com/errata/RHSA-2026:14836
reference_id RHSA-2026:14836
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:14836
12
reference_url https://access.redhat.com/errata/RHSA-2026:15942
reference_id RHSA-2026:15942
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15942
13
reference_url https://access.redhat.com/errata/RHSA-2026:15943
reference_id RHSA-2026:15943
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15943
14
reference_url https://access.redhat.com/errata/RHSA-2026:15945
reference_id RHSA-2026:15945
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15945
15
reference_url https://access.redhat.com/errata/RHSA-2026:15966
reference_id RHSA-2026:15966
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15966
16
reference_url https://access.redhat.com/errata/RHSA-2026:6906
reference_id RHSA-2026:6906
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6906
17
reference_url https://access.redhat.com/errata/RHSA-2026:6907
reference_id RHSA-2026:6907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6907
18
reference_url https://access.redhat.com/errata/RHSA-2026:6923
reference_id RHSA-2026:6923
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6923
19
reference_url https://access.redhat.com/errata/RHSA-2026:7002
reference_id RHSA-2026:7002
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7002
20
reference_url https://access.redhat.com/errata/RHSA-2026:7343
reference_id RHSA-2026:7343
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7343
21
reference_url https://access.redhat.com/errata/RHSA-2026:8346
reference_id RHSA-2026:8346
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:8346
22
reference_url https://usn.ubuntu.com/8210-1/
reference_id USN-8210-1
reference_type
scores
url https://usn.ubuntu.com/8210-1/
fixed_packages
0
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kvpj-4273-4khg
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u3%3Fdistro=trixie
1
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u6%3Fdistro=trixie
2
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u5?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u5%3Fdistro=trixie
3
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-kvpj-4273-4khg
2
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u6%3Fdistro=trixie
4
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u3%3Fdistro=trixie
5
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u4%3Fdistro=trixie
6
url pkg:deb/debian/nginx@1.28.3-1?distro=trixie
purl pkg:deb/debian/nginx@1.28.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.28.3-1%3Fdistro=trixie
7
url pkg:deb/debian/nginx@1.30.1-3?distro=trixie
purl pkg:deb/debian/nginx@1.30.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.1-3%3Fdistro=trixie
aliases CVE-2026-32647
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cxs8-z482-ufht
4
url VCID-dfzv-bqb6-xkgp
vulnerability_id VCID-dfzv-bqb6-xkgp
summary nginx: ngx_http_charset_module: information disclosure and denial of service
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-42934.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-42934.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-42934
reference_id
reference_type
scores
0
value 0.00044
scoring_system epss
scoring_elements 0.13942
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-42934
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42934
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42934
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2477066
reference_id 2477066
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2477066
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-42934
reference_id CVE-2026-42934
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2026-42934
6
reference_url https://my.f5.com/manage/s/article/K000161028
reference_id K000161028
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T15:55:18Z/
url https://my.f5.com/manage/s/article/K000161028
fixed_packages
0
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kvpj-4273-4khg
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u3%3Fdistro=trixie
1
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u6%3Fdistro=trixie
2
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-kvpj-4273-4khg
2
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u6%3Fdistro=trixie
3
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u7?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u7?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u7%3Fdistro=trixie
4
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u4%3Fdistro=trixie
5
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u5?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u5%3Fdistro=trixie
6
url pkg:deb/debian/nginx@1.30.0-4?distro=trixie
purl pkg:deb/debian/nginx@1.30.0-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.0-4%3Fdistro=trixie
7
url pkg:deb/debian/nginx@1.30.1-3?distro=trixie
purl pkg:deb/debian/nginx@1.30.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.1-3%3Fdistro=trixie
aliases CVE-2026-42934
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dfzv-bqb6-xkgp
5
url VCID-fpta-dc5f-pkct
vulnerability_id VCID-fpta-dc5f-pkct
summary NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-27784.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-27784.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-27784
reference_id
reference_type
scores
0
value 0.00014
scoring_system epss
scoring_elements 0.02947
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-27784
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27784
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27784
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2450785
reference_id 2450785
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2450785
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-27784
reference_id CVE-2026-27784
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2026-27784
6
reference_url https://my.f5.com/manage/s/article/K000160364
reference_id K000160364
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-25T03:55:53Z/
url https://my.f5.com/manage/s/article/K000160364
7
reference_url https://access.redhat.com/errata/RHSA-2026:10065
reference_id RHSA-2026:10065
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:10065
8
reference_url https://access.redhat.com/errata/RHSA-2026:13634
reference_id RHSA-2026:13634
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:13634
9
reference_url https://access.redhat.com/errata/RHSA-2026:13680
reference_id RHSA-2026:13680
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:13680
10
reference_url https://access.redhat.com/errata/RHSA-2026:13839
reference_id RHSA-2026:13839
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:13839
11
reference_url https://access.redhat.com/errata/RHSA-2026:14836
reference_id RHSA-2026:14836
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:14836
12
reference_url https://access.redhat.com/errata/RHSA-2026:15942
reference_id RHSA-2026:15942
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15942
13
reference_url https://access.redhat.com/errata/RHSA-2026:15943
reference_id RHSA-2026:15943
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15943
14
reference_url https://access.redhat.com/errata/RHSA-2026:15945
reference_id RHSA-2026:15945
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15945
15
reference_url https://access.redhat.com/errata/RHSA-2026:15966
reference_id RHSA-2026:15966
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15966
16
reference_url https://access.redhat.com/errata/RHSA-2026:6906
reference_id RHSA-2026:6906
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6906
17
reference_url https://access.redhat.com/errata/RHSA-2026:6907
reference_id RHSA-2026:6907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6907
18
reference_url https://access.redhat.com/errata/RHSA-2026:6923
reference_id RHSA-2026:6923
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6923
19
reference_url https://access.redhat.com/errata/RHSA-2026:7002
reference_id RHSA-2026:7002
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7002
20
reference_url https://access.redhat.com/errata/RHSA-2026:7343
reference_id RHSA-2026:7343
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7343
21
reference_url https://access.redhat.com/errata/RHSA-2026:8346
reference_id RHSA-2026:8346
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:8346
22
reference_url https://usn.ubuntu.com/8210-1/
reference_id USN-8210-1
reference_type
scores
url https://usn.ubuntu.com/8210-1/
fixed_packages
0
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kvpj-4273-4khg
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u3%3Fdistro=trixie
1
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u6%3Fdistro=trixie
2
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u5?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u5%3Fdistro=trixie
3
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-kvpj-4273-4khg
2
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u6%3Fdistro=trixie
4
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u3%3Fdistro=trixie
5
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u4%3Fdistro=trixie
6
url pkg:deb/debian/nginx@1.28.3-1?distro=trixie
purl pkg:deb/debian/nginx@1.28.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.28.3-1%3Fdistro=trixie
7
url pkg:deb/debian/nginx@1.30.1-3?distro=trixie
purl pkg:deb/debian/nginx@1.30.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.1-3%3Fdistro=trixie
aliases CVE-2026-27784
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fpta-dc5f-pkct
6
url VCID-gjvm-84ff-3qad
vulnerability_id VCID-gjvm-84ff-3qad
summary NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-27654.json
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-27654.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-27654
reference_id
reference_type
scores
0
value 0.0002
scoring_system epss
scoring_elements 0.05879
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-27654
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27654
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27654
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2450776
reference_id 2450776
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2450776
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-27654
reference_id CVE-2026-27654
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2026-27654
6
reference_url https://my.f5.com/manage/s/article/K000160382
reference_id K000160382
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-24T15:14:50Z/
url https://my.f5.com/manage/s/article/K000160382
7
reference_url https://access.redhat.com/errata/RHSA-2026:10065
reference_id RHSA-2026:10065
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:10065
8
reference_url https://access.redhat.com/errata/RHSA-2026:13634
reference_id RHSA-2026:13634
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:13634
9
reference_url https://access.redhat.com/errata/RHSA-2026:13680
reference_id RHSA-2026:13680
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:13680
10
reference_url https://access.redhat.com/errata/RHSA-2026:13839
reference_id RHSA-2026:13839
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:13839
11
reference_url https://access.redhat.com/errata/RHSA-2026:14836
reference_id RHSA-2026:14836
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:14836
12
reference_url https://access.redhat.com/errata/RHSA-2026:15942
reference_id RHSA-2026:15942
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15942
13
reference_url https://access.redhat.com/errata/RHSA-2026:15943
reference_id RHSA-2026:15943
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15943
14
reference_url https://access.redhat.com/errata/RHSA-2026:15945
reference_id RHSA-2026:15945
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15945
15
reference_url https://access.redhat.com/errata/RHSA-2026:15966
reference_id RHSA-2026:15966
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15966
16
reference_url https://access.redhat.com/errata/RHSA-2026:6906
reference_id RHSA-2026:6906
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6906
17
reference_url https://access.redhat.com/errata/RHSA-2026:6907
reference_id RHSA-2026:6907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6907
18
reference_url https://access.redhat.com/errata/RHSA-2026:6923
reference_id RHSA-2026:6923
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6923
19
reference_url https://access.redhat.com/errata/RHSA-2026:7002
reference_id RHSA-2026:7002
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7002
20
reference_url https://access.redhat.com/errata/RHSA-2026:7343
reference_id RHSA-2026:7343
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7343
21
reference_url https://access.redhat.com/errata/RHSA-2026:8346
reference_id RHSA-2026:8346
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:8346
22
reference_url https://usn.ubuntu.com/8210-1/
reference_id USN-8210-1
reference_type
scores
url https://usn.ubuntu.com/8210-1/
fixed_packages
0
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kvpj-4273-4khg
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u3%3Fdistro=trixie
1
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u6%3Fdistro=trixie
2
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u5?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u5%3Fdistro=trixie
3
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-kvpj-4273-4khg
2
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u6%3Fdistro=trixie
4
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u3%3Fdistro=trixie
5
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u4%3Fdistro=trixie
6
url pkg:deb/debian/nginx@1.28.3-1?distro=trixie
purl pkg:deb/debian/nginx@1.28.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.28.3-1%3Fdistro=trixie
7
url pkg:deb/debian/nginx@1.30.1-3?distro=trixie
purl pkg:deb/debian/nginx@1.30.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.1-3%3Fdistro=trixie
aliases CVE-2026-27654
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gjvm-84ff-3qad
7
url VCID-kn1z-74dk-zyed
vulnerability_id VCID-kn1z-74dk-zyed
summary NGINX: NGINX Plus: NGINX Open Source: NGINX Plus and NGINX Open Source: Request manipulation via header injection in SMTP upstream requests
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-28753.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-28753.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-28753
reference_id
reference_type
scores
0
value 0.00029
scoring_system epss
scoring_elements 0.08898
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-28753
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28753
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2450780
reference_id 2450780
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2450780
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-28753
reference_id CVE-2026-28753
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2026-28753
6
reference_url https://my.f5.com/manage/s/article/K000160367
reference_id K000160367
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-24T15:24:28Z/
url https://my.f5.com/manage/s/article/K000160367
7
reference_url https://access.redhat.com/errata/RHSA-2026:8346
reference_id RHSA-2026:8346
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:8346
8
reference_url https://usn.ubuntu.com/8210-1/
reference_id USN-8210-1
reference_type
scores
url https://usn.ubuntu.com/8210-1/
fixed_packages
0
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kvpj-4273-4khg
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u3%3Fdistro=trixie
1
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u6%3Fdistro=trixie
2
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u5?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u5%3Fdistro=trixie
3
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-kvpj-4273-4khg
2
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u6%3Fdistro=trixie
4
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u3%3Fdistro=trixie
5
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u4%3Fdistro=trixie
6
url pkg:deb/debian/nginx@1.28.3-1?distro=trixie
purl pkg:deb/debian/nginx@1.28.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.28.3-1%3Fdistro=trixie
7
url pkg:deb/debian/nginx@1.30.1-3?distro=trixie
purl pkg:deb/debian/nginx@1.30.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.1-3%3Fdistro=trixie
aliases CVE-2026-28753
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kn1z-74dk-zyed
8
url VCID-ttbr-yfea-47c5
vulnerability_id VCID-ttbr-yfea-47c5
summary NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-27651.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-27651.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-27651
reference_id
reference_type
scores
0
value 0.00048
scoring_system epss
scoring_elements 0.15288
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-27651
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27651
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27651
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2450791
reference_id 2450791
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2450791
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-27651
reference_id CVE-2026-27651
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2026-27651
6
reference_url https://my.f5.com/manage/s/article/K000160383
reference_id K000160383
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-24T15:02:03Z/
url https://my.f5.com/manage/s/article/K000160383
7
reference_url https://access.redhat.com/errata/RHSA-2026:10065
reference_id RHSA-2026:10065
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:10065
8
reference_url https://access.redhat.com/errata/RHSA-2026:13634
reference_id RHSA-2026:13634
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:13634
9
reference_url https://access.redhat.com/errata/RHSA-2026:13680
reference_id RHSA-2026:13680
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:13680
10
reference_url https://access.redhat.com/errata/RHSA-2026:13839
reference_id RHSA-2026:13839
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:13839
11
reference_url https://access.redhat.com/errata/RHSA-2026:14836
reference_id RHSA-2026:14836
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:14836
12
reference_url https://access.redhat.com/errata/RHSA-2026:15942
reference_id RHSA-2026:15942
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15942
13
reference_url https://access.redhat.com/errata/RHSA-2026:15943
reference_id RHSA-2026:15943
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15943
14
reference_url https://access.redhat.com/errata/RHSA-2026:15945
reference_id RHSA-2026:15945
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15945
15
reference_url https://access.redhat.com/errata/RHSA-2026:15966
reference_id RHSA-2026:15966
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:15966
16
reference_url https://access.redhat.com/errata/RHSA-2026:6906
reference_id RHSA-2026:6906
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6906
17
reference_url https://access.redhat.com/errata/RHSA-2026:6907
reference_id RHSA-2026:6907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6907
18
reference_url https://access.redhat.com/errata/RHSA-2026:6923
reference_id RHSA-2026:6923
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6923
19
reference_url https://access.redhat.com/errata/RHSA-2026:7002
reference_id RHSA-2026:7002
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7002
20
reference_url https://access.redhat.com/errata/RHSA-2026:7343
reference_id RHSA-2026:7343
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7343
21
reference_url https://access.redhat.com/errata/RHSA-2026:8346
reference_id RHSA-2026:8346
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:8346
22
reference_url https://usn.ubuntu.com/8210-1/
reference_id USN-8210-1
reference_type
scores
url https://usn.ubuntu.com/8210-1/
fixed_packages
0
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kvpj-4273-4khg
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u3%3Fdistro=trixie
1
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u6%3Fdistro=trixie
2
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u5?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u5%3Fdistro=trixie
3
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-kvpj-4273-4khg
2
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u6%3Fdistro=trixie
4
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u3%3Fdistro=trixie
5
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u4%3Fdistro=trixie
6
url pkg:deb/debian/nginx@1.28.3-1?distro=trixie
purl pkg:deb/debian/nginx@1.28.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.28.3-1%3Fdistro=trixie
7
url pkg:deb/debian/nginx@1.30.1-3?distro=trixie
purl pkg:deb/debian/nginx@1.30.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.1-3%3Fdistro=trixie
aliases CVE-2026-27651
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ttbr-yfea-47c5
9
url VCID-uy9d-zu9s-6yh3
vulnerability_id VCID-uy9d-zu9s-6yh3
summary nginx: NGINX: Arbitrary Code Execution Vulnerability
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-42945.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-42945.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-42945
reference_id
reference_type
scores
0
value 0.00897
scoring_system epss
scoring_elements 0.75963
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-42945
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42945
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2477116
reference_id 2477116
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2477116
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-42945
reference_id CVE-2026-42945
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2026-42945
6
reference_url https://my.f5.com/manage/s/article/K000161019
reference_id K000161019
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-13T15:55:27Z/
url https://my.f5.com/manage/s/article/K000161019
7
reference_url https://access.redhat.com/errata/RHSA-2026:17417
reference_id RHSA-2026:17417
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:17417
8
reference_url https://access.redhat.com/errata/RHSA-2026:17751
reference_id RHSA-2026:17751
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:17751
9
reference_url https://access.redhat.com/errata/RHSA-2026:17752
reference_id RHSA-2026:17752
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:17752
10
reference_url https://access.redhat.com/errata/RHSA-2026:17753
reference_id RHSA-2026:17753
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:17753
11
reference_url https://access.redhat.com/errata/RHSA-2026:17790
reference_id RHSA-2026:17790
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:17790
12
reference_url https://access.redhat.com/errata/RHSA-2026:17791
reference_id RHSA-2026:17791
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:17791
13
reference_url https://access.redhat.com/errata/RHSA-2026:17792
reference_id RHSA-2026:17792
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:17792
14
reference_url https://access.redhat.com/errata/RHSA-2026:17793
reference_id RHSA-2026:17793
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:17793
15
reference_url https://access.redhat.com/errata/RHSA-2026:17794
reference_id RHSA-2026:17794
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:17794
16
reference_url https://access.redhat.com/errata/RHSA-2026:18029
reference_id RHSA-2026:18029
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:18029
17
reference_url https://access.redhat.com/errata/RHSA-2026:18041
reference_id RHSA-2026:18041
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:18041
18
reference_url https://access.redhat.com/errata/RHSA-2026:18063
reference_id RHSA-2026:18063
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:18063
19
reference_url https://access.redhat.com/errata/RHSA-2026:19159
reference_id RHSA-2026:19159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:19159
20
reference_url https://access.redhat.com/errata/RHSA-2026:19371
reference_id RHSA-2026:19371
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:19371
21
reference_url https://access.redhat.com/errata/RHSA-2026:19372
reference_id RHSA-2026:19372
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:19372
22
reference_url https://access.redhat.com/errata/RHSA-2026:19374
reference_id RHSA-2026:19374
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:19374
23
reference_url https://access.redhat.com/errata/RHSA-2026:20442
reference_id RHSA-2026:20442
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:20442
24
reference_url https://access.redhat.com/errata/RHSA-2026:20444
reference_id RHSA-2026:20444
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:20444
25
reference_url https://access.redhat.com/errata/RHSA-2026:21275
reference_id RHSA-2026:21275
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:21275
26
reference_url https://usn.ubuntu.com/8271-1/
reference_id USN-8271-1
reference_type
scores
url https://usn.ubuntu.com/8271-1/
fixed_packages
0
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kvpj-4273-4khg
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u3%3Fdistro=trixie
1
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u6%3Fdistro=trixie
2
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-kvpj-4273-4khg
2
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u6%3Fdistro=trixie
3
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u7?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u7?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u7%3Fdistro=trixie
4
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u4%3Fdistro=trixie
5
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u5?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u5%3Fdistro=trixie
6
url pkg:deb/debian/nginx@1.30.0-3?distro=trixie
purl pkg:deb/debian/nginx@1.30.0-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.0-3%3Fdistro=trixie
7
url pkg:deb/debian/nginx@1.30.1-3?distro=trixie
purl pkg:deb/debian/nginx@1.30.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.1-3%3Fdistro=trixie
aliases CVE-2026-42945
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uy9d-zu9s-6yh3
10
url VCID-wc2b-cb7d-ekbq
vulnerability_id VCID-wc2b-cb7d-ekbq
summary nginx: ngx_http_ssl_module: data corruption and denial of service
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-40701.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-40701.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-40701
reference_id
reference_type
scores
0
value 0.00044
scoring_system epss
scoring_elements 0.13942
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-40701
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40701
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40701
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2477076
reference_id 2477076
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2477076
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-40701
reference_id CVE-2026-40701
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2026-40701
6
reference_url https://my.f5.com/manage/s/article/K000161021
reference_id K000161021
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T15:55:34Z/
url https://my.f5.com/manage/s/article/K000161021
fixed_packages
0
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kvpj-4273-4khg
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u3%3Fdistro=trixie
1
url pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
purl pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u6%3Fdistro=trixie
2
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-kvpj-4273-4khg
2
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u6%3Fdistro=trixie
3
url pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u7?distro=trixie
purl pkg:deb/debian/nginx@1.22.1-9%2Bdeb12u7?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.22.1-9%252Bdeb12u7%3Fdistro=trixie
4
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-422n-2b44-mbh2
1
vulnerability VCID-xsdq-5m4c-mqcs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u4%3Fdistro=trixie
5
url pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u5?distro=trixie
purl pkg:deb/debian/nginx@1.26.3-3%2Bdeb13u5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.26.3-3%252Bdeb13u5%3Fdistro=trixie
6
url pkg:deb/debian/nginx@1.30.0-4?distro=trixie
purl pkg:deb/debian/nginx@1.30.0-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.0-4%3Fdistro=trixie
7
url pkg:deb/debian/nginx@1.30.1-3?distro=trixie
purl pkg:deb/debian/nginx@1.30.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.30.1-3%3Fdistro=trixie
aliases CVE-2026-40701
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wc2b-cb7d-ekbq
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/nginx@1.18.0-6.1%252Bdeb11u6%3Fdistro=trixie