{"schema":"vulnpedia.research/1","cve":"CVE-2026-97205","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162608","tags":["vendor-advisory","vendor-reference"],"source":"mitre","sourceId":"f5","modified":"2026-10-14T14:40:27.487Z","origins":[{"source":"mitre","sourceId":"f5","modified":"2026-10-14T14:40:27.487Z","url":"https://my.f5.com/manage/s/article/K000162608"},{"source":"nvd","sourceId":"CVE-2026-97205","modified":"2026-10-15T11:18:08.670","url":"https://my.f5.com/manage/s/article/K000162608"},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://my.f5.com/manage/s/article/K000162608"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-97205","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-97205"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552359","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552359"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-97205","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-97205"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97205","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97205"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:83427","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:83427"}]},{"source":"euvd","sourceId":"EUVD-2026-101115","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101115","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101115","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101115"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/suominen/CVE-2026-97205","source":"poc-in-github","sourceId":"CVE-2026-97205","modified":"2026-10-26T06:30:55Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-97205","url":"https://github.com/suominen/CVE-2026-97205"},{"source":"poc-in-github","sourceId":"CVE-2026-97205","modified":"2026-10-26T06:30:55Z","url":"https://github.com/suominen/CVE-2026-97205"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@aarch64","product":"nginx-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-0:1.30.6-1.hum1@src","product":"nginx-0:1.30.6-1.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx@1.30.6-1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms","product":"nginx-all-modules-0:1.30.6-1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-all-modules@1.30.6-1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-core-0:1.30.6-1.hum1@aarch64","product":"nginx-core-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-core@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms","product":"nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-filesystem@1.30.6-1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms","product":"nginx-filesystem-0:1.30.6-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-filesystem@1.30.6-1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-mod-devel-0:1.30.6-1.hum1@s390x","product":"nginx-mod-devel-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-mod-devel@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x","product":"nginx-mod-http-geoip-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-mod-http-geoip@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64","product":"nginx-mod-http-image-filter-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-mod-http-image-filter@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64","product":"nginx-mod-http-perl-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-mod-http-perl@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64","product":"nginx-mod-http-perl-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-mod-http-perl@1.30.6-1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x","product":"nginx-mod-http-xslt-filter-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-mod-mail-0:1.30.6-1.hum1@s390x","product":"nginx-mod-mail-0:1.30.6-1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-mod-mail@1.30.6-1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-mod-stream-0:1.30.6-1.hum1@aarch64","product":"nginx-mod-stream-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-mod-stream@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64","product":"nginx-mod-stream-geoip-0:1.30.6-1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-mod-stream-geoip@1.30.6-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"Red Hat Hardened Images:nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64","product":"nginx-mod-stream-geoip-0:1.30.6-1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83427"},{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."}],"purl":"pkg:rpm/redhat/nginx-mod-stream-geoip@1.30.6-1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_10:nginx","product":"nginx as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_10:nginx-mod-devel","product":"nginx-mod-devel as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx-mod-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_10:nginx-mod-http-xslt-filter","product":"nginx-mod-http-xslt-filter as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx-mod-http-xslt-filter","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_8:nginx-all-modules::nginx:1.24","product":"nginx-all-modules (nginx:1.24) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx-all-modules?rpmmod=nginx:1.24","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_8:nginx-mod-http-image-filter::nginx:1.24","product":"nginx-mod-http-image-filter (nginx:1.24) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx-mod-http-image-filter?rpmmod=nginx:1.24","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_8:nginx-mod-stream::nginx:1.24","product":"nginx-mod-stream (nginx:1.24) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx-mod-stream?rpmmod=nginx:1.24","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_9:nginx","product":"nginx as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_9:nginx-core","product":"nginx-core as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx-core","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_9:nginx-filesystem","product":"nginx-filesystem as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx-filesystem","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_9:nginx-mod-devel::nginx:1.24","product":"nginx-mod-devel (nginx:1.24) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx-mod-devel?rpmmod=nginx:1.24","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_9:nginx-mod-http-image-filter::nginx:1.24","product":"nginx-mod-http-image-filter (nginx:1.24) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx-mod-http-image-filter?rpmmod=nginx:1.24","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_9:nginx-mod-http-perl::nginx:1.26","product":"nginx-mod-http-perl (nginx:1.26) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx-mod-http-perl?rpmmod=nginx:1.26","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_9:nginx-mod-http-xslt-filter::nginx:1.26","product":"nginx-mod-http-xslt-filter (nginx:1.26) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx-mod-http-xslt-filter?rpmmod=nginx:1.26","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_9:nginx-mod-stream","product":"nginx-mod-stream as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx-mod-stream","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_9:nginx.src","product":"nginx.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]},{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json","productId":"red_hat_enterprise_linux_9:nginx::nginx:1.26","product":"nginx (nginx:1.26) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this vulnerability, based on your environment requirements, you can either disable asynchronous file I/O (AIO) or Server Side Includes (SSI)."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nginx?rpmmod=nginx:1.26","origins":[{"source":"redhat","sourceId":"CVE-2026-97205","modified":"2026-10-16T14:52:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97205.json"}]}],"vendorCoverage":{"total":91,"shown":32,"omitted":59,"source":"redhat"}}