CVE-2026-60065

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-60065
When NGINX Plus is configured to use the Message Queuing Telemetry Transport (MQTT) filter module (ngx_stream_mqtt_filter_module), unauthenticated attackers can send requests with conditions beyond the attacker's control to cause a heap buffer over-read in the NGINX worker process, leading to a restart. Impact: This vulnerability may allow remote unauthenticated attackers to have limited control to restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

3.7 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://my.f5.com/manage/s/article/K000162101 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:f5:nginx_gateway_fabric:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:nginx_gateway_fabric:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:continuous_releases:*:*:*
cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:continuous_releases:*:*:*
cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:long-term_support:*:*:*
cpe:2.3:a:f5:nginx_ingress_controller:4.0.0:*:*:*:continuous_releases:*:*:*
cpe:2.3:a:f5:nginx_ingress_controller:4.0.1:*:*:*:continuous_releases:*:*:*
cpe:2.3:a:f5:nginx_plus:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:nginx_plus:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:nginx_plus:r36:-:*:*:*:*:*:*
cpe:2.3:a:f5:nginx_plus:r36:p1:*:*:*:*:*:*
cpe:2.3:a:f5:nginx_plus:r36:p2:*:*:*:*:*:*
cpe:2.3:a:f5:nginx_plus:r36:p3:*:*:*:*:*:*
cpe:2.3:a:f5:nginx_plus:r36:p4:*:*:*:*:*:*
cpe:2.3:a:f5:nginx_plus:r36:p5:*:*:*:*:*:*
cpe:2.3:a:f5:nginx_plus:r36:p6:*:*:*:*:*:*
cpe:2.3:a:f5:waf:*:*:*:*:*:nginx:*:*
cpe:2.3:a:f5:waf:*:*:*:*:*:nginx:*:*
cpe:2.3:a:f5:waf:*:*:*:*:*:nginx:*:*
History

24 Oct 2026, 21:10

Type Values Removed Values Added
Summary
  • (es) Cuando NGINX Plus está configurado para usar el módulo de filtro Message Queuing Telemetry Transport (MQTT) (ngx_stream_mqtt_filter_module), atacantes no autenticados pueden enviar solicitudes con condiciones fuera del control del atacante para causar una lectura excesiva del búfer de pila en el proceso de trabajador de NGINX, lo que lleva a un reinicio. Impacto: Esta vulnerabilidad puede permitir a atacantes remotos no autenticados tener un control limitado para reiniciar el proceso de trabajador de NGINX. No hay exposición del plano de control; esto es solo un problema del plano de datos. Nota: Las versiones de software que han alcanzado el Fin del Soporte Técnico (EoTS) no se evalúan.
Information

Published : 2026-07-15 15:16

Updated : 2026-10-24 21:10

NVD link : CVE-2026-60065

Mitre link : CVE-2026-60065

CVE.ORG link : CVE-2026-60065

JSON object : View

Products Affected

f5

  • nginx_gateway_fabric
  • nginx_ingress_controller
  • nginx_plus
  • waf
CWE
CWE-125

Out-of-bounds Read