NG
Product
ngx_cache_purge
by denji · last CVE Oct 12, 2026
1
CVEs
0
On KEV
3.6
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 0Low 1
Watch

Add ngx_cache_purge to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-108981
3.6
0%
Oct 12
ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same user…
Affected: 2.4.0 through 2.5.6; 3.0.0 before 3.0.4
Showing 1