[NEW] [high] NGINX NGINX Plus: Multiple vulnerabilities

highpublic exploitCVE-2026-42533 CVE-2026-56434 CVE-2026-60005 CVE-2026-60065

An attacker can exploit multiple vulnerabilities in NGINX NGINX Plus to execute arbitrary code, carry out a Denial of Service attack, manipulate data, and disclose information.

CSIRTS triage

vendor: NGINX product: NGINX Plus Remote code execution Denial of service Information disclosureOther

What: Multiple vulnerabilities in NGINX Plus can be exploited to execute arbitrary code, manipulate data, and cause Denial of Service.
Who is affected: Users of NGINX Plus are affected by these vulnerabilities.
Urgency: Remediation is high urgency due to the critical nature of the vulnerabilities.
Action: Users should apply the latest security updates immediately.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch NGINX Plus

Get an email when a new NGINX Plus advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: high
Published: 2026-07-30
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2383

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Moderate exploitation riskCVE-2026-425333.6% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 88% of all scored CVEs.
Low exploitation riskCVE-2026-564340.45% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all scored CVEs.
Low exploitation riskCVE-2026-600050.71% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 50% of all scored CVEs.
Low exploitation riskCVE-2026-600650.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 18% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-42533	coverage & exploitation status	NVD · CVE.org
CVE-2026-56434	coverage & exploitation status	NVD · CVE.org
CVE-2026-60005	coverage & exploitation status	NVD · CVE.org
CVE-2026-60065	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for NGINX NGINX Plus

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

high[UPDATE] [high] NGINX and NGINX Plus: Multiple vulnerabilitiescert-bund · 2026-07-30
high[UPDATE] [high] NGINX Open Source and NGINX Plus: Multiple vulnerabilitiescert-bund · 2026-07-29
high[UPDATE] [high] NGINX and NGINX Plus: Multiple vulnerabilitiescert-bund · 2026-07-24
high[UPDATE] [high] NGINX Open Source and NGINX Plus: Vulnerability allows denial of service and potentially code …cert-bund · 2026-07-24
highCVE-2026-60005: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. Whe…nvd · 2026-07-15
lowCVE-2026-60065: When NGINX Plus is configured to use the Message Queuing Telemetry Transport (MQTT) filter mod…nvd · 2026-07-15