CyberRota
Back to database

CVE-2026-40460

MEDIUM · CVSS 6.5 EPSS 0.02%

Source: NVD + CISA KEV + EPSS · Published: 2026-05-13 · Last synced: 2026-06-09

CyberRota Analysis

Detaylı analiz gerekiyor.

CVE
CVE-2026-40460
Severity
MEDIUM
CVSS
6.5
EPSS
0.02%
Nginx

Original NVD Description

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.