CVE-2024-70272

Database vulnerability - Nginx

High CVSS Score: 7.4 Published: 2026-03-05

Description

A authentication bypass vulnerability in Nginx Database allows attackers to cause denial of service. This affects versions prior to 16.53.6.

Affected Systems

Vendor Nginx
Product Database
Affected Versions < 2.65
CWE ID CWE-22

Mitigation

As a workaround, use Web Application Firewall until a patch is available.

Fix Instructions

1. Update Database to the latest version
2. Apply vendor patch when available
3. Implement network segmentation
4. Monitor for exploitation attempts

References

Risk Assessment

CVSS: 7.4/10

Exploit Available Yes
Patch Available Yes

Need Help Patching?

Our security team can help assess and remediate this vulnerability in your environment.

Get Help

Stay Ahead of Threats

Subscribe to our vulnerability feed and get instant alerts when new CVEs affect your systems.

Start Monitoring