Skip to content

CVE record · 1 source

CVE-2026-108981

CVSS 3.6

ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g.…

Vendor: F5
Product: NGINX, WordPress core
CVSS: 3.6
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

5

CVE NVD 20d ago

ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g.…

ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same user account. The attacker must be able to create a symlink…

CVSS 3.6 CVE-2026-108981 F5