CVE-2026-60005
Fixed in a distro release EPSS <1%CVSS 8.2
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX worker process, leading to limited disclosure of memory or a restart. Impact: This vulnerability may allow remote, unauthenticated attackers to have limited control to disclose memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only. Note: The ngx_http_slice_module module is not enabled by default; it's enabled with the --with-http_slice_module configuration parameter. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Products: F5 NGINX Plus, F5 NGINX Open Source
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | nginx | 2:1.26.3-6.el10_2.6 |
| AlmaLinux 10 | nginx-all-modules | 2:1.26.3-6.el10_2.6 |
| AlmaLinux 10 | nginx-core | 2:1.26.3-6.el10_2.6 |
| AlmaLinux 10 | nginx-filesystem | 2:1.26.3-6.el10_2.6 |
| AlmaLinux 10 | nginx-mod-devel | 2:1.26.3-6.el10_2.6 |
| AlmaLinux 10 | nginx-mod-http-image-filter | 2:1.26.3-6.el10_2.6 |
| AlmaLinux 10 | nginx-mod-http-perl | 2:1.26.3-6.el10_2.6 |
| AlmaLinux 10 | nginx-mod-http-xslt-filter | 2:1.26.3-6.el10_2.6 |
| AlmaLinux 10 | nginx-mod-mail | 2:1.26.3-6.el10_2.6 |
| AlmaLinux 10 | nginx-mod-stream | 2:1.26.3-6.el10_2.6 |
| AlmaLinux 8 | nginx | 1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1 |
| AlmaLinux 8 | nginx-all-modules | 1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1 |
| AlmaLinux 8 | nginx-filesystem | 1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1 |
| AlmaLinux 8 | nginx-mod-devel | 1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1 |
| AlmaLinux 8 | nginx-mod-http-image-filter | 1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1 |
| AlmaLinux 8 | nginx-mod-http-perl | 1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1 |
| AlmaLinux 8 | nginx-mod-http-xslt-filter | 1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1 |
| AlmaLinux 8 | nginx-mod-mail | 1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1 |
| AlmaLinux 8 | nginx-mod-stream | 1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1 |
| AlmaLinux 9 | nginx | 2:1.20.1-28.el9_8.5.alma.1 |
| AlmaLinux 9 | nginx | 2:1.26.3-9.module_el9.8.0+300+0781a894.3 |
| AlmaLinux 9 | nginx | 1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1 |
| AlmaLinux 9 | nginx-all-modules | 2:1.20.1-28.el9_8.5.alma.1 |
| AlmaLinux 9 | nginx-all-modules | 2:1.26.3-9.module_el9.8.0+300+0781a894.3 |
| AlmaLinux 9 | nginx-all-modules | 1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1 |
| AlmaLinux 9 | nginx-core | 1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1 |
| AlmaLinux 9 | nginx-core | 2:1.20.1-28.el9_8.5.alma.1 |
| AlmaLinux 9 | nginx-core | 2:1.26.3-9.module_el9.8.0+300+0781a894.3 |
| AlmaLinux 9 | nginx-filesystem | 1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1 |
| AlmaLinux 9 | nginx-filesystem | 2:1.26.3-9.module_el9.8.0+300+0781a894.3 |
| AlmaLinux 9 | nginx-filesystem | 2:1.20.1-28.el9_8.5.alma.1 |
| AlmaLinux 9 | nginx-mod-devel | 2:1.20.1-28.el9_8.5.alma.1 |
| AlmaLinux 9 | nginx-mod-devel | 2:1.26.3-9.module_el9.8.0+300+0781a894.3 |
| AlmaLinux 9 | nginx-mod-devel | 1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1 |
| AlmaLinux 9 | nginx-mod-http-image-filter | 2:1.26.3-9.module_el9.8.0+300+0781a894.3 |
| AlmaLinux 9 | nginx-mod-http-image-filter | 2:1.20.1-28.el9_8.5.alma.1 |
| AlmaLinux 9 | nginx-mod-http-image-filter | 1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1 |
| AlmaLinux 9 | nginx-mod-http-perl | 1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1 |
| AlmaLinux 9 | nginx-mod-http-perl | 2:1.20.1-28.el9_8.5.alma.1 |
| AlmaLinux 9 | nginx-mod-http-perl | 2:1.26.3-9.module_el9.8.0+300+0781a894.3 |
| AlmaLinux 9 | nginx-mod-http-xslt-filter | 1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1 |
| AlmaLinux 9 | nginx-mod-http-xslt-filter | 2:1.20.1-28.el9_8.5.alma.1 |
| AlmaLinux 9 | nginx-mod-http-xslt-filter | 2:1.26.3-9.module_el9.8.0+300+0781a894.3 |
| AlmaLinux 9 | nginx-mod-mail | 2:1.26.3-9.module_el9.8.0+300+0781a894.3 |
| AlmaLinux 9 | nginx-mod-mail | 1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1 |
| AlmaLinux 9 | nginx-mod-mail | 2:1.20.1-28.el9_8.5.alma.1 |
| AlmaLinux 9 | nginx-mod-stream | 2:1.20.1-28.el9_8.5.alma.1 |
| AlmaLinux 9 | nginx-mod-stream | 1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1 |
| AlmaLinux 9 | nginx-mod-stream | 2:1.26.3-9.module_el9.8.0+300+0781a894.3 |
| Alpine 3.21 | nginx | 1.26.3-r2 |
| Alpine 3.22 | nginx | 1.28.3-r6 |
| Alpine 3.23 | nginx | 1.28.3-r6 |
| Alpine 3.24 | nginx | 1.30.4-r0 |
| Chainguard | commercial-nginx-plus | 37.0.3.1-r0 |
| Chainguard | nginx-mainline | 1.31.3-r0 |
| Chainguard | nginx-stable | 1.30.4-r0 |
| Chainguard | nginx-stable-package-config | 1.30.4-r5 |
| Debian 12 | nginx | 1.22.1-9+deb12u10 |
| Debian 13 | nginx | 1.26.3-3+deb13u8 |
| Debian 14 | nginx | 1.30.1-7 |
| Red Hat Enterprise Linux 10.2 | nginx | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-all-modules | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-core | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-core-debuginfo | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-debuginfo | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-debugsource | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-filesystem | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-mod-devel | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-mod-http-image-filter | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-mod-http-image-filter-debuginfo | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-mod-http-perl | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-mod-http-perl-debuginfo | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-mod-http-xslt-filter | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-mod-http-xslt-filter-debuginfo | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-mod-mail | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-mod-mail-debuginfo | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-mod-stream | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | nginx-mod-stream-debuginfo | 2:1.26.3-6.el10_2.6 |
| Red Hat Enterprise Linux 8 | nginx | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-all-modules | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-debuginfo | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-debugsource | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-filesystem | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-mod-devel | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-mod-http-image-filter | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-mod-http-image-filter-debuginfo | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-mod-http-perl | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-mod-http-perl-debuginfo | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-mod-http-xslt-filter | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-mod-http-xslt-filter-debuginfo | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-mod-mail | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-mod-mail-debuginfo | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-mod-stream | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 8 | nginx-mod-stream-debuginfo | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 |
| Red Hat Enterprise Linux 9 | nginx | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-all-modules | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-all-modules | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-all-modules | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-core | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-core | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-core | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-core-debuginfo | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-core-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-core-debuginfo | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-debuginfo | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-debuginfo | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-debugsource | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-debugsource | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-debugsource | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-filesystem | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-filesystem | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-filesystem | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-mod-devel | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-mod-devel | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-mod-devel | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-image-filter | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-image-filter | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-image-filter | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-image-filter-debuginfo | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-image-filter-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-image-filter-debuginfo | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-perl | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-perl | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-perl | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-perl-debuginfo | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-perl-debuginfo | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-perl-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-xslt-filter | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-xslt-filter | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-xslt-filter | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-xslt-filter-debuginfo | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-xslt-filter-debuginfo | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-mod-http-xslt-filter-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-mod-mail | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-mod-mail | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-mod-mail | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-mod-mail-debuginfo | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-mod-mail-debuginfo | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-mod-mail-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-mod-stream | 2:1.20.1-28.el9_8.5 |
| Red Hat Enterprise Linux 9 | nginx-mod-stream | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-mod-stream | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-mod-stream-debuginfo | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 |
| Red Hat Enterprise Linux 9 | nginx-mod-stream-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat Enterprise Linux 9 | nginx-mod-stream-debuginfo | 2:1.20.1-28.el9_8.5 |
| Red Hat hummingbird 1 | nginx | 0:1.30.4-2.hum1 |
| Red Hat hummingbird 1 | nginx-all-modules | 0:1.30.4-2.hum1 |
| Red Hat hummingbird 1 | nginx-core | 0:1.30.4-2.hum1 |
| Red Hat hummingbird 1 | nginx-filesystem | 0:1.30.4-2.hum1 |
| Red Hat hummingbird 1 | nginx-mod-devel | 0:1.30.4-2.hum1 |
| Red Hat hummingbird 1 | nginx-mod-http-geoip | 0:1.30.4-2.hum1 |
| Red Hat hummingbird 1 | nginx-mod-http-image-filter | 0:1.30.4-2.hum1 |
| Red Hat hummingbird 1 | nginx-mod-http-perl | 0:1.30.4-2.hum1 |
| Red Hat hummingbird 1 | nginx-mod-http-xslt-filter | 0:1.30.4-2.hum1 |
| Red Hat hummingbird 1 | nginx-mod-mail | 0:1.30.4-2.hum1 |
| Red Hat hummingbird 1 | nginx-mod-stream | 0:1.30.4-2.hum1 |
| Red Hat hummingbird 1 | nginx-mod-stream-geoip | 0:1.30.4-2.hum1 |
| Rocky Linux 10 | nginx | 2:1.26.3-6.el10_2.6 |
| Rocky Linux 8 | nginx | 1:1.24.0-3.module+el8.10.0+40249+a5ea815d.3 |
| Rocky Linux 8 | nginx | 1:1.24.0-3.module+el8.10.0+40298+8ed65491.4 |
| Rocky Linux 8 | nginx | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| Rocky Linux 8 | nginx | 1:1.24.0-3.module+el8.10.0+40220+e6a4bcb0.2 |
| Rocky Linux 8 | nginx | 1:1.24.0-3.module+el8.10.0+40187+52bedf24.1 |
| Rocky Linux 9 | nginx | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| Rocky Linux 9 | nginx | 2:1.20.1-28.el9_8.5.rocky.0.1 |
| Rocky Linux 9 | nginx | 1:1.24.0-7.module+el9.8.0+40218+76099d32.2.rocky.0.1 |
| Rocky Linux 9 | nginx | 1:1.24.0-7.module+el9.8.0+40234+d28db9b8.3.rocky.0.1 |
| Rocky Linux 9 | nginx | 2:1.26.3-9.module+el9.8.0+40235+8be1317a.2 |
| Rocky Linux 9 | nginx | 2:1.26.3-9.module+el9.8.0+40222+e48d13b6.1 |
| Rocky Linux 9 | nginx | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| Ubuntu 22.04 LTS | nginx | 1.18.0-6ubuntu14.17 |
| Ubuntu 24.04 LTS | nginx | 1.24.0-2ubuntu7.14 |
| Ubuntu 26.04 LTS | nginx | 1.28.3-2ubuntu1.7 |
| Ubuntu Pro 14.04 LTS | nginx | no fix |
| Ubuntu Pro 16.04 LTS | nginx | no fix |
| Ubuntu Pro 18.04 LTS | nginx | no fix |
| Ubuntu Pro 20.04 LTS | nginx | no fix |
| Wolfi | nginx-mainline | 1.31.3-r0 |
| Wolfi | nginx-stable | 1.30.4-r0 |
| Wolfi | nginx-stable-package-config | 1.30.4-r5 |
| openSUSE Tumbleweed | nginx | 1.31.3-1.1 |