This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2025-1695 | BDVDB-2026-269148 Detail

F5NGINX Unit

Description#

In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can lead to an infinite loop and cause an increase in CPU resource utilization. This vulnerability allows a remote attacker to cause a degradation that can lead to a limited denial-of-service (DoS).  There is no control plane exposure; this is a data plane issue only.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.