NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charset, and charset_map and proxy_pass with disabled buffering ("off") directives are configured, unauthenticated attackers can send requests that with conditions beyond the attackers' control to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Details
- CVSS 4.0 Base Score: 6.3 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 4.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nginx | May 15, 2026 | May 13, 2026 |
| Amazon Linux Ami 2 | — | Upgrade nginx-filesystemUpgrade nginx-mod-develUpgrade nginx-mod-http-geoipUpgrade nginx-debuginfoUpgrade nginxUpgrade nginx-mod-streamUpgrade nginx-all-modulesUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-http-perlUpgrade nginx-mod-mailUpgrade nginx-coreUpgrade nginx-mod-http-image-filter | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade nginx-mod-http-image-filterUpgrade nginx-core-debuginfoUpgrade nginx-mod-http-perlUpgrade nginx-mod-mail-debuginfoUpgrade nginx-debugsourceUpgrade nginx-mod-http-xslt-filter-debuginfoUpgrade nginx-mod-http-xslt-filterUpgrade nginx-all-modulesUpgrade nginx-coreUpgrade nginxUpgrade nginx-mod-streamUpgrade nginx-mod-mailUpgrade nginx-mod-develUpgrade nginx-mod-http-image-filter-debuginfoUpgrade nginx-debuginfoUpgrade nginx-mod-http-perl-debuginfoUpgrade nginx-filesystemUpgrade nginx-mod-stream-debuginfo | May 28, 2026 | May 13, 2026 |
| Debian | — | Upgrade nginx | May 17, 2026 | May 17, 2026 |
| Freebsd | — | Upgrade nginx-develUpgrade nginx | May 21, 2026 | May 19, 2026 |
| Gentoo Linux | — | Upgrade www-servers/nginx. | Aug 17, 2026 | Aug 17, 2026 |
| Nginx | — | Upgrade to nginx version 1.31.0Upgrade to nginx version 1.30.1 | May 14, 2026 | May 13, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 13, 2026 |
| Ubuntu | — | Upgrade libnginx-mod-http-lua (Ubuntu Pro)Upgrade nginxUpgrade libnginx-mod-http-fancyindex (Ubuntu Pro)Upgrade nginx-fullUpgrade libnginx-mod-http-uploadprogress (Ubuntu Pro)Upgrade nginx-extras (Ubuntu Pro)Upgrade libnginx-mod-http-upstream-fair (Ubuntu Pro)Upgrade libnginx-mod-http-dav-ext (Ubuntu Pro)Upgrade nginx-common (Ubuntu Pro)Upgrade libnginx-mod-rtmp (Ubuntu Pro)Upgrade libnginx-mod-http-cache-purge (Ubuntu Pro)Upgrade libnginx-mod-http-ndk (Ubuntu Pro)Upgrade nginx-extrasUpgrade libnginx-mod-stream (Ubuntu Pro)Upgrade libnginx-mod-http-xslt-filter (Ubuntu Pro)Upgrade libnginx-mod-http-headers-more-filter (Ubuntu Pro)Upgrade nginx-lightUpgrade libnginx-mod-nchan (Ubuntu Pro)Upgrade nginx-core (Ubuntu Pro)Upgrade libnginx-mod-http-auth-pam (Ubuntu Pro)Upgrade nginx (Ubuntu Pro)Upgrade libnginx-mod-http-geoip (Ubuntu Pro)Upgrade libnginx-mod-http-perl (Ubuntu Pro)Upgrade nginx-naxsi (Ubuntu Pro)Upgrade nginx-light (Ubuntu Pro)Upgrade libnginx-mod-mail (Ubuntu Pro)Upgrade nginx-full (Ubuntu Pro)Upgrade libnginx-mod-http-image-filter (Ubuntu Pro)Upgrade libnginx-mod-http-subs-filter (Ubuntu Pro)Upgrade libnginx-mod-http-echo (Ubuntu Pro)Upgrade nginx-core | Jun 2, 2026 | Jun 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub