PT-2026-60186 · F5 · Nginx Agent+1

Publicado 2026-07-15 · Atualizado 2026-07-15 · CVE-2026-60062

Mitre

CVSS v3.1

6.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

The NGINX Agent config dirs directive allows a low-privileged attacker to gain limited read and write access to files outside of the designated secure directory. The config dirs directive required for this issue can also be configured through NGINX Instance Manager. A successful exploit may allow an attacker to cross a security boundary.

Impact: A remotely authenticated low-privileged attacker could gain limited read and write access outside of the list of directories specified in the NGINX Agent configuration.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-60062

Produtos afetados

Nginx Agent

Nginx Instance Manager

Referências · 2

• https://my.f5.com/manage/s/article/K000161971 · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-60062 · Nota de Segurança