Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-r6yw-nrv5-aycy
Vulnerability ID VCID-r6yw-nrv5-aycy
Aliases CVE-2010-2263
Summary Vulnerabilities with Windows file default stream
Status Published
Exploitability 2.0
Weighted Severity 4.5
Risk 9.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
System Score Found at
epss 0.44217 https://api.first.org/data/v1/epss?cve=CVE-2010-2263
epss 0.44217 https://api.first.org/data/v1/epss?cve=CVE-2010-2263
epss 0.44217 https://api.first.org/data/v1/epss?cve=CVE-2010-2263
epss 0.44217 https://api.first.org/data/v1/epss?cve=CVE-2010-2263
epss 0.44217 https://api.first.org/data/v1/epss?cve=CVE-2010-2263
epss 0.44217 https://api.first.org/data/v1/epss?cve=CVE-2010-2263
epss 0.44217 https://api.first.org/data/v1/epss?cve=CVE-2010-2263
epss 0.44217 https://api.first.org/data/v1/epss?cve=CVE-2010-2263
epss 0.44217 https://api.first.org/data/v1/epss?cve=CVE-2010-2263
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2010-2263
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2010-2263
http://spa-s3c.blogspot.com/2010/06/full-responsible-disclosurenginx-engine.html
http://www.exploit-db.com/exploits/13818
http://www.exploit-db.com/exploits/13822
http://www.securityfocus.com/bid/40760
cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
CVE-2010-2263 https://nvd.nist.gov/vuln/detail/CVE-2010-2263
CVE-2010-2263;OSVDB-65531 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/13822.txt
CVE-2010-2266;CVE-2010-2263;OSVDB-65531;OSVDB-65530 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/13818.txt
Data source Exploit-DB
Date added June 10, 2010
Description Nginx 0.8.36 - Source Disclosure / Denial of Service
Ransomware campaign use Known
Source publication date June 11, 2010
Exploit type remote
Platform windows
Data source Metasploit
Description This module exploits a source code disclosure/download vulnerability in versions 0.7 and 0.8 of the nginx web server. Versions 0.7.66 and 0.8.40 correct this vulnerability.
Note 
{}
Ransomware campaign use Unknown
Source URL https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/scanner/http/nginx_source_disclosure.rb
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2010-2263
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.97526
EPSS Score 0.44217
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T12:31:46.175121+00:00 Nginx Importer Import https://nginx.org/en/security_advisories.html 38.0.0