nginx 1.15.8 < 1.30.4 / 1.31.2 < 1.31.3 内存泄露

版本 1.4

Oct 14, 2026, 6:26 PM

CVE (set "CVE" coverage to "CVE-2026-60005")
CVSS metrics ("CVSSv3 score" set to 8.2)
CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H")
CVSS metrics ("Cvssv4 score" set to 8.8)
CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U")
CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N")
CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C")
CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C")
CVSSv3 score source (changed from "CVE-2026-42533" to none)
Exploit attributes ("Exploit available" changed from "True" to "False")
Exploit attributes ("Exploit framework core" changed from "True" to none)
Exploit attributes ("Exploitability ease" changed from "Exploits are available" to "No known exploits are available")