WID-SEC-W-2026-1995

Vulnerability from csaf_certbund - Published: 2026-06-17 22:00 - Updated: 2026-07-21 22:00
Summary
NGINX und NGINX Plus: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: NGINX ist eine Webserver-, Reverse Proxy- und E-Mail-Proxy Software. NGINX Plus ist die kommerzielle Variante von NGINX, einer Webserver-, Reverse Proxy- und E-Mail Proxy Software.
Angriff: Ein Angreifer kann mehrere Schwachstellen in NGINX und NGINX NGINX Plus ausnutzen, um Daten zu manipulieren, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
Betroffene Betriebssysteme: - Sonstiges - UNIX - Windows
CVE-2026-11311
Affected products
Product Identifier Version Remediation
NGINX NGINX Plus <37.0.2.1
NGINX / NGINX Plus
 <37.0.2.1
Oracle Linux
Oracle
 cpe:/o:oracle:linux:- —
NGINX NGINX Gateway Fabric <2.6.4
NGINX / NGINX
 Gateway Fabric <2.6.4
Debian Linux
Debian
 cpe:/o:debian:debian_linux:- —
Red Hat Enterprise Linux
Red Hat
 cpe:/o:redhat:enterprise_linux:- —
Amazon Linux 2
Amazon
 cpe:/o:amazon:linux_2:- —
RESF Rocky Linux
RESF
 cpe:/o:resf:rocky_linux:- —
NGINX NGINX Plus <R36 P6
NGINX / NGINX Plus
 <R36 P6
CVE-2026-32682
Affected products
Product Identifier Version Remediation
Oracle Linux
Oracle
 cpe:/o:oracle:linux:- —
NGINX NGINX Gateway Fabric <2.6.4
NGINX / NGINX
 Gateway Fabric <2.6.4
Debian Linux
Debian
 cpe:/o:debian:debian_linux:- —
Red Hat Enterprise Linux
Red Hat
 cpe:/o:redhat:enterprise_linux:- —
Amazon Linux 2
Amazon
 cpe:/o:amazon:linux_2:- —
RESF Rocky Linux
RESF
 cpe:/o:resf:rocky_linux:- —
CVE-2026-42055
Affected products
Product Identifier Version Remediation
Oracle Linux
Oracle
 cpe:/o:oracle:linux:- —
NGINX NGINX Plus <37.0.2.1
NGINX / NGINX Plus
 <37.0.2.1
NGINX NGINX Ingress Controller
NGINX / NGINX
 cpe:/a:nginx:nginx:ingress_controller Ingress Controller
NGINX NGINX Gateway Fabric <2.6.4
NGINX / NGINX
 Gateway Fabric <2.6.4
NGINX NGINX Instance Manager
NGINX / NGINX
 cpe:/a:nginx:nginx:instance_manager Instance Manager
NGINX NGINX Open Source <1.31.2
NGINX / NGINX
 Open Source <1.31.2
Red Hat Enterprise Linux
Red Hat
 cpe:/o:redhat:enterprise_linux:- —
NGINX NGINX App Protect DoS
NGINX / NGINX
 cpe:/a:nginx:nginx:app_protect_dos App Protect DoS
RESF Rocky Linux
RESF
 cpe:/o:resf:rocky_linux:- —
NGINX NGINX App Protect WAF
NGINX / NGINX
 cpe:/a:nginx:nginx:app_protect_waf App Protect WAF
NGINX NGINX Open Source <1.30.3
NGINX / NGINX
 Open Source <1.30.3
NGINX NGINX Plus <R36 P6
NGINX / NGINX Plus
 <R36 P6
Debian Linux
Debian
 cpe:/o:debian:debian_linux:- —
Amazon Linux 2
Amazon
 cpe:/o:amazon:linux_2:- —
CVE-2026-42530
Affected products
Product Identifier Version Remediation
Oracle Linux
Oracle
 cpe:/o:oracle:linux:- —
NGINX NGINX Ingress Controller
NGINX / NGINX
 cpe:/a:nginx:nginx:ingress_controller Ingress Controller
NGINX NGINX Gateway Fabric <2.6.4
NGINX / NGINX
 Gateway Fabric <2.6.4
NGINX NGINX Instance Manager
NGINX / NGINX
 cpe:/a:nginx:nginx:instance_manager Instance Manager
Debian Linux
Debian
 cpe:/o:debian:debian_linux:- —
NGINX NGINX Open Source <1.31.2
NGINX / NGINX
 Open Source <1.31.2
Red Hat Enterprise Linux
Red Hat
 cpe:/o:redhat:enterprise_linux:- —
Amazon Linux 2
Amazon
 cpe:/o:amazon:linux_2:- —
RESF Rocky Linux
RESF
 cpe:/o:resf:rocky_linux:- —
CVE-2026-48142
Affected products
Product Identifier Version Remediation
Oracle Linux
Oracle
 cpe:/o:oracle:linux:- —
NGINX NGINX Plus <37.0.2.1
NGINX / NGINX Plus
 <37.0.2.1
NGINX NGINX Ingress Controller
NGINX / NGINX
 cpe:/a:nginx:nginx:ingress_controller Ingress Controller
NGINX NGINX Gateway Fabric <2.6.4
NGINX / NGINX
 Gateway Fabric <2.6.4
NGINX NGINX Instance Manager
NGINX / NGINX
 cpe:/a:nginx:nginx:instance_manager Instance Manager
NGINX NGINX Open Source <1.31.2
NGINX / NGINX
 Open Source <1.31.2
Red Hat Enterprise Linux
Red Hat
 cpe:/o:redhat:enterprise_linux:- —
NGINX NGINX App Protect DoS
NGINX / NGINX
 cpe:/a:nginx:nginx:app_protect_dos App Protect DoS
RESF Rocky Linux
RESF
 cpe:/o:resf:rocky_linux:- —
NGINX NGINX App Protect WAF
NGINX / NGINX
 cpe:/a:nginx:nginx:app_protect_waf App Protect WAF
NGINX NGINX Open Source <1.30.3
NGINX / NGINX
 Open Source <1.30.3
NGINX NGINX Plus <R36 P6
NGINX / NGINX Plus
 <R36 P6
Debian Linux
Debian
 cpe:/o:debian:debian_linux:- —
Amazon Linux 2
Amazon
 cpe:/o:amazon:linux_2:- —
CVE-2026-50107
Affected products
Product Identifier Version Remediation
Oracle Linux
Oracle
 cpe:/o:oracle:linux:- —
NGINX NGINX Gateway Fabric <2.6.4
NGINX / NGINX
 Gateway Fabric <2.6.4
Debian Linux
Debian
 cpe:/o:debian:debian_linux:- —
Red Hat Enterprise Linux
Red Hat
 cpe:/o:redhat:enterprise_linux:- —
Amazon Linux 2
Amazon
 cpe:/o:amazon:linux_2:- —
RESF Rocky Linux
RESF
 cpe:/o:resf:rocky_linux:- —
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "NGINX ist eine Webserver-, Reverse Proxy- und E-Mail-Proxy Software.\r\nNGINX Plus ist die kommerzielle Variante von NGINX, einer Webserver-, Reverse Proxy- und E-Mail Proxy Software.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in NGINX und NGINX NGINX Plus ausnutzen, um Daten zu manipulieren, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszul\u00f6sen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-1995 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1995.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-1995 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1995"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2026-06-17",
        "url": "https://github.com/advisories/GHSA-gx48-gh32-62q5"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2026-06-17",
        "url": "https://github.com/advisories/GHSA-vh3x-jr27-wpwh"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2026-06-17",
        "url": "https://github.com/advisories/GHSA-2388-jp8v-fg9w"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2026-06-17",
        "url": "https://github.com/advisories/GHSA-5mcp-3252-f5vr"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2026-06-17",
        "url": "https://github.com/advisories/GHSA-78jw-ww3g-9wp7"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2026-06-17",
        "url": "https://github.com/advisories/GHSA-9566-3h6w-56pp"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:27197 vom 2026-06-26",
        "url": "https://access.redhat.com/errata/RHSA-2026:27197"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-6374 vom 2026-07-01",
        "url": "https://security-tracker.debian.org/tracker/DSA-6374-1"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-4660 vom 2026-07-01",
        "url": "https://lists.debian.org/debian-lts-announce/2026/07/msg00001.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-4667 vom 2026-07-03",
        "url": "https://lists.debian.org/debian-lts-announce/2026/07/msg00008.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2NGINX1-2026-014 vom 2026-07-08",
        "url": "https://alas.aws.amazon.com/AL2/ALAS2NGINX1-2026-014.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:36364 vom 2026-07-08",
        "url": "https://access.redhat.com/errata/RHSA-2026:36364"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:36331 vom 2026-07-08",
        "url": "https://access.redhat.com/errata/RHSA-2026:36331"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:36618 vom 2026-07-08",
        "url": "https://errata.build.resf.org/RLSA-2026:36618"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:36364 vom 2026-07-08",
        "url": "https://errata.build.resf.org/RLSA-2026:36364"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:36639 vom 2026-07-08",
        "url": "https://errata.build.resf.org/RLSA-2026:36639"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-36639 vom 2026-07-09",
        "url": "https://linux.oracle.com/errata/ELSA-2026-36639.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-36618 vom 2026-07-09",
        "url": "https://linux.oracle.com/errata/ELSA-2026-36618.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:38847 vom 2026-07-13",
        "url": "https://access.redhat.com/errata/RHSA-2026:38847"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:38847 vom 2026-07-13",
        "url": "https://errata.build.resf.org/RLSA-2026:38847"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-36331 vom 2026-07-14",
        "url": "https://linux.oracle.com/errata/ELSA-2026-36331.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-19159 vom 2026-07-22",
        "url": "https://linux.oracle.com/errata/ELSA-2026-19159.html"
      }
    ],
    "source_lang": "en-US",
    "title": "NGINX und NGINX Plus: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-07-21T22:00:00.000+00:00",
      "generator": {
        "date": "2026-07-22T09:18:40.579+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-1995",
      "initial_release_date": "2026-06-17T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-06-17T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-06-28T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-06-30T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2026-07-05T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2026-07-07T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Amazon und Red Hat aufgenommen"
        },
        {
          "date": "2026-07-08T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-07-09T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2026-07-12T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-07-13T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation und Oracle Linux aufgenommen"
        },
        {
          "date": "2026-07-21T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        }
      ],
      "status": "final",
      "version": "10"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Open Source \u003c1.31.2",
                "product": {
                  "name": "NGINX NGINX Open Source \u003c1.31.2",
                  "product_id": "T055582"
                }
              },
              {
                "category": "product_version",
                "name": "Open Source 1.31.2",
                "product": {
                  "name": "NGINX NGINX Open Source 1.31.2",
                  "product_id": "T055582-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx:open_source__1.31.2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Instance Manager",
                "product": {
                  "name": "NGINX NGINX Instance Manager",
                  "product_id": "T055583",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx:instance_manager"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Gateway Fabric \u003c2.6.4",
                "product": {
                  "name": "NGINX NGINX Gateway Fabric \u003c2.6.4",
                  "product_id": "T055584"
                }
              },
              {
                "category": "product_version",
                "name": "Gateway Fabric 2.6.4",
                "product": {
                  "name": "NGINX NGINX Gateway Fabric 2.6.4",
                  "product_id": "T055584-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx:gateway_fabric__2.6.4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Ingress Controller",
                "product": {
                  "name": "NGINX NGINX Ingress Controller",
                  "product_id": "T055585",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx:ingress_controller"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Open Source \u003c1.30.3",
                "product": {
                  "name": "NGINX NGINX Open Source \u003c1.30.3",
                  "product_id": "T055588"
                }
              },
              {
                "category": "product_version",
                "name": "Open Source 1.30.3",
                "product": {
                  "name": "NGINX NGINX Open Source 1.30.3",
                  "product_id": "T055588-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx:open_source__1.30.3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "App Protect WAF",
                "product": {
                  "name": "NGINX NGINX App Protect WAF",
                  "product_id": "T055589",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx:app_protect_waf"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "App Protect DoS",
                "product": {
                  "name": "NGINX NGINX App Protect DoS",
                  "product_id": "T055590",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx:app_protect_dos"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NGINX"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c37.0.2.1",
                "product": {
                  "name": "NGINX NGINX Plus \u003c37.0.2.1",
                  "product_id": "T055586"
                }
              },
              {
                "category": "product_version",
                "name": "37.0.2.1",
                "product": {
                  "name": "NGINX NGINX Plus 37.0.2.1",
                  "product_id": "T055586-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx_plus:37.0.2.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cR36 P6",
                "product": {
                  "name": "NGINX NGINX Plus \u003cR36 P6",
                  "product_id": "T055587"
                }
              },
              {
                "category": "product_version",
                "name": "R36 P6",
                "product": {
                  "name": "NGINX NGINX Plus R36 P6",
                  "product_id": "T055587-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx_plus:r36_p6"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NGINX Plus"
          }
        ],
        "category": "vendor",
        "name": "NGINX"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T056236",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T032255",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-11311",
      "product_status": {
        "known_affected": [
          "T055586",
          "T056236",
          "T055584",
          "2951",
          "67646",
          "398363",
          "T032255",
          "T055587"
        ]
      },
      "release_date": "2026-06-17T22:00:00.000+00:00",
      "title": "CVE-2026-11311"
    },
    {
      "cve": "CVE-2026-32682",
      "product_status": {
        "known_affected": [
          "T056236",
          "T055584",
          "2951",
          "67646",
          "398363",
          "T032255"
        ]
      },
      "release_date": "2026-06-17T22:00:00.000+00:00",
      "title": "CVE-2026-32682"
    },
    {
      "cve": "CVE-2026-42055",
      "product_status": {
        "known_affected": [
          "T056236",
          "T055586",
          "T055585",
          "T055584",
          "T055583",
          "T055582",
          "67646",
          "T055590",
          "T032255",
          "T055589",
          "T055588",
          "T055587",
          "2951",
          "398363"
        ]
      },
      "release_date": "2026-06-17T22:00:00.000+00:00",
      "title": "CVE-2026-42055"
    },
    {
      "cve": "CVE-2026-42530",
      "product_status": {
        "known_affected": [
          "T056236",
          "T055585",
          "T055584",
          "T055583",
          "2951",
          "T055582",
          "67646",
          "398363",
          "T032255"
        ]
      },
      "release_date": "2026-06-17T22:00:00.000+00:00",
      "title": "CVE-2026-42530"
    },
    {
      "cve": "CVE-2026-48142",
      "product_status": {
        "known_affected": [
          "T056236",
          "T055586",
          "T055585",
          "T055584",
          "T055583",
          "T055582",
          "67646",
          "T055590",
          "T032255",
          "T055589",
          "T055588",
          "T055587",
          "2951",
          "398363"
        ]
      },
      "release_date": "2026-06-17T22:00:00.000+00:00",
      "title": "CVE-2026-48142"
    },
    {
      "cve": "CVE-2026-50107",
      "product_status": {
        "known_affected": [
          "T056236",
          "T055584",
          "2951",
          "67646",
          "398363",
          "T032255"
        ]
      },
      "release_date": "2026-06-17T22:00:00.000+00:00",
      "title": "CVE-2026-50107"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.