CVE-2026-58055
ADVISORY - debianSummary
nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and Connection headers while passing Content-Length verbatim. A backend that resolves the resulting ambiguous message in the attacker's favor enables HTTP request/response smuggling and cross-client response-queue poisoning.
- nghttp2 (bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140917) [trixie] - nghttp2 (Minor issue) [bookworm] - nghttp2 (Minor issue) [bullseye] - nghttp2 (Minor issue) https://github.com/bikini/exploitarium/tree/main/nghttp2-nghttpx-upgrade-queue-poison-poc https://github.com/nghttp2/nghttp2/commit/ab28105c4a0197da24f8bfc414bc116055249e1e
EPSS Score: 0.00263 (0.182)
Common Weakness Enumeration (CWE)
Alpine
CREATED
UPDATED
ADVISORY IDCVE-2026-58055
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| alpine/nghttp2 | apk | alpine | 3.23 | <=1.69.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | edge | <1.70.0-r0 | 1.70.0-r0 |
| alpine/nghttp2 | apk | alpine | 3.22 | <=1.39.2-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.22 | <=1.41.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.22 | <=1.57.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.22 | <=1.65.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.22 | <=1.69.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.19 | <=1.39.2-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.19 | <=1.41.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.19 | <=1.57.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.19 | <=1.58.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.23 | <=1.68.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.24 | <1.70.0-r0 | 1.70.0-r0 |
| alpine/nghttp2 | apk | alpine | 3.20 | <=1.39.2-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.20 | <=1.41.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.20 | <=1.57.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.20 | <=1.62.1-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.21 | <=1.39.2-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.21 | <=1.41.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.21 | <=1.57.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.21 | <=1.64.0-r0 | Not yet available |
| alpine/nghttp2 | apk | alpine | 3.21 | <=1.69.0-r0 | Not yet available |
Severity and metrics
No CVSS data available from this advisory.
Debian
CREATED
UPDATED
ADVISORY IDCVE-2026-58055
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Ubuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-58055
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AmediumAlma
CREATED
UPDATED
ADVISORY IDALSA-2026:54662
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AmediumRocky
CREATED
UPDATED
ADVISORY IDRLSA-2026:54650
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AlowRocky
CREATED
UPDATED
ADVISORY IDRLSA-2026:54662
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AlowOracle
CREATED
UPDATED
ADVISORY IDELSA-2026-54650
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AmediumOracle
CREATED
UPDATED
ADVISORY IDELSA-2026-54662
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AmediumChainguard
CREATED
UPDATED
ADVISORY ID
CGA-833v-74cw-p36q
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Photon
CREATED
UPDATED
ADVISORY ID
CVE-2026-58055
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
5.4mediumminimos
CREATED
UPDATED
ADVISORY ID
MINI-wgg3-56h4-pc44
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-