https://vulnogram.org/ Most recent CVEs assigned by F5, Inc. (f5). https://vulnogram.org/seaview/icons/f5.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-104939 https://vulnogram.org/CVE-2026-104939 Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to prote… High Network Exploitable Wed, 14 Oct 2026 14:40:30 GMT https://vulnogram.org/CVE-2026-101019 https://vulnogram.org/CVE-2026-101019 Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the canonicalization process, the… High Network Exploitable Wed, 14 Oct 2026 14:40:29 GMT https://vulnogram.org/CVE-2026-101025 https://vulnogram.org/CVE-2026-101025 Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanup and the context was not released for the lifetime of the process. An… Medium Network Exploitable Wed, 14 Oct 2026 14:40:29 GMT https://vulnogram.org/CVE-2026-95101 https://vulnogram.org/CVE-2026-95101 Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with proxy_request_buffering on directive, an unauthenticated attacker may be able to inject data in the proxied request. Impact Thi… Medium Network Exploitable Wed, 14 Oct 2026 14:40:28 GMT https://vulnogram.org/CVE-2026-94197 https://vulnogram.org/CVE-2026-94197 An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the `ExternalAuth` policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-… High Network Exploitable Wed, 14 Oct 2026 14:40:28 GMT https://vulnogram.org/CVE-2026-96615 https://vulnogram.org/CVE-2026-96615 Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent. A namespaced authenticated attacker with access to a service account… High Wed, 14 Oct 2026 14:40:28 GMT https://vulnogram.org/CVE-2026-91184 https://vulnogram.org/CVE-2026-91184 Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as auth_basic "<realm… High Wed, 14 Oct 2026 14:40:27 GMT https://vulnogram.org/CVE-2026-97205 https://vulnogram.org/CVE-2026-97205 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes (SSI) page containing “include virtual” commands may tr… Critical Network Exploitable Wed, 14 Oct 2026 14:40:27 GMT https://vulnogram.org/CVE-2026-93479 https://vulnogram.org/CVE-2026-93479 A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, th… Critical Network Exploitable Wed, 14 Oct 2026 14:40:27 GMT https://vulnogram.org/CVE-2026-97629 https://vulnogram.org/CVE-2026-97629 Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is ab… High Network Exploitable Wed, 14 Oct 2026 14:40:26 GMT https://vulnogram.org/CVE-2026-15176 https://vulnogram.org/CVE-2026-15176 A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable. Alternatively, the same result coul… Critical Network Exploitable Wed, 14 Oct 2026 14:40:26 GMT https://vulnogram.org/CVE-2026-94127 https://vulnogram.org/CVE-2026-94127 When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Se… Critical Known Exploited Network Exploitable Tue, 22 Sep 2026 14:17:42 GMT https://vulnogram.org/CVE-2026-90439 https://vulnogram.org/CVE-2026-90439 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions <= OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshak… Medium Network Exploitable Tue, 15 Sep 2026 14:27:26 GMT https://vulnogram.org/CVE-2026-78222 https://vulnogram.org/CVE-2026-78222 A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch() can crash an NGINX worker when trusted JavaScript reads Response.statusText. Exploitation requires control or influence over the fetched HTTP response.… High Network Exploitable Wed, 02 Sep 2026 15:40:55 GMT https://vulnogram.org/CVE-2026-78689 https://vulnogram.org/CVE-2026-78689 Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n() method. An unauthenticated remote attacker can trigger it when an affected NGINX configuration passes a… Critical Network Exploitable Wed, 02 Sep 2026 15:40:55 GMT https://vulnogram.org/CVE-2026-77180 https://vulnogram.org/CVE-2026-77180 When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration w… High Wed, 02 Sep 2026 15:40:54 GMT https://vulnogram.org/CVE-2026-66362 https://vulnogram.org/CVE-2026-66362 Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the Authentication Filte… High Wed, 02 Sep 2026 15:40:54 GMT https://vulnogram.org/CVE-2026-18329 https://vulnogram.org/CVE-2026-18329 Description NGINX JavaScript (njs) and QuickJS (qjs) engines have a vulnerability when a js_access handler performs asynchronous request body processing and an exception is thrown during asynchronous access-control evaluation before an explicit acces… High Network Exploitable Wed, 02 Sep 2026 15:40:54 GMT https://vulnogram.org/CVE-2026-66842 https://vulnogram.org/CVE-2026-66842 BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to Traffic Management User Interface (TMUI). Impact: This vulnerability may allow an authenticated at… High Wed, 02 Sep 2026 15:40:53 GMT https://vulnogram.org/CVE-2026-63020 https://vulnogram.org/CVE-2026-63020 A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message… Low Network Exploitable Wed, 02 Sep 2026 15:40:53 GMT https://vulnogram.org/CVE-2026-60005 https://vulnogram.org/CVE-2026-60005 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that… High Network Exploitable Wed, 15 Jul 2026 15:04:21 GMT https://vulnogram.org/CVE-2026-60065 https://vulnogram.org/CVE-2026-60065 When NGINX Plus is configured to use the Message Queuing Telemetry Transport (MQTT) filter module (ngx_stream_mqtt_filter_module), unauthenticated attackers can send requests with conditions beyond the attacker's control to cause a heap buffer over-r… Medium Network Exploitable Wed, 15 Jul 2026 14:33:46 GMT https://vulnogram.org/CVE-2026-56434 https://vulnogram.org/CVE-2026-56434 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unau… High Network Exploitable Wed, 15 Jul 2026 14:33:46 GMT https://vulnogram.org/CVE-2026-42533 https://vulnogram.org/CVE-2026-42533 A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could… Critical Network Exploitable Wed, 15 Jul 2026 14:33:45 GMT https://vulnogram.org/CVE-2026-60062 https://vulnogram.org/CVE-2026-60062 The NGINX Agent config_dirs directive allows a low-privileged attacker to gain limited read and write access to files outside of the designated secure directory. The config_dirs directive required for this issue can also be configured through NGINX I… Medium Wed, 15 Jul 2026 14:33:45 GMT https://vulnogram.org/CVE-2026-52865 https://vulnogram.org/CVE-2026-52865 When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permission to create or modify Ingress or TransportServer resources can cause the NGINX Ingress Controller process to terminate. Impa… High Wed, 15 Jul 2026 14:33:45 GMT https://vulnogram.org/CVE-2026-55723 https://vulnogram.org/CVE-2026-55723 When NGINX Ingress Controller is configured with Custom Resource Definitions (CRDs) or Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written in… High Wed, 15 Jul 2026 14:33:44 GMT https://vulnogram.org/CVE-2026-59762 https://vulnogram.org/CVE-2026-59762 When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Impact: System performance can degrade until the TMM process is either forced to restart or is manually restarted. Th… High Network Exploitable Wed, 15 Jul 2026 14:33:44 GMT https://vulnogram.org/CVE-2026-32682 https://vulnogram.org/CVE-2026-32682 When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with permission to create or modify GRPCRoute resources can cause the NGINX Gateway Fabric control plane to terminate by sending undisclosed GRPCRoute configu… High Wed, 17 Jun 2026 20:05:17 GMT https://vulnogram.org/CVE-2026-50107 https://vulnogram.org/CVE-2026-50107 When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the NginxProxy C… High Wed, 17 Jun 2026 20:04:44 GMT https://vulnogram.org/CVE-2026-11311 https://vulnogram.org/CVE-2026-11311 When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the NginxProxy Custom Resource Defini… High Wed, 17 Jun 2026 14:04:33 GMT https://vulnogram.org/CVE-2026-48142 https://vulnogram.org/CVE-2026-48142 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured,… Medium Network Exploitable Wed, 17 Jun 2026 14:04:32 GMT https://vulnogram.org/CVE-2026-42055 https://vulnogram.org/CVE-2026-42055 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_in… Critical Network Exploitable Wed, 17 Jun 2026 14:04:32 GMT https://vulnogram.org/CVE-2026-42530 https://vulnogram.org/CVE-2026-42530 NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/… Critical Network Exploitable Wed, 17 Jun 2026 14:04:32 GMT https://vulnogram.org/CVE-2026-9256 https://vulnogram.org/CVE-2026-9256 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for ex… Critical Network Exploitable Fri, 22 May 2026 14:11:41 GMT https://vulnogram.org/CVE-2026-8711 https://vulnogram.org/CVE-2026-8711 NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*, $cookie_*) and a location invoking the ngx.fetch() operation from NGINX JavaScript.… Critical Network Exploitable Tue, 19 May 2026 14:04:18 GMT https://vulnogram.org/CVE-2026-42926 https://vulnogram.org/CVE-2026-42926 When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer. Note: Software versions which have… Medium Network Exploitable Wed, 13 May 2026 14:12:45 GMT https://vulnogram.org/CVE-2026-40460 https://vulnogram.org/CVE-2026-40460 When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting. Note: Software versions which have reached En… Medium Network Exploitable Wed, 13 May 2026 14:12:45 GMT https://vulnogram.org/CVE-2026-42946 https://vulnogram.org/CVE-2026-42946 A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data. When scgi_pass or uwsgi_pass is configured, an unauthenticated attacker with man-in-the-middl… High Network Exploitable Wed, 13 May 2026 14:12:44 GMT https://vulnogram.org/CVE-2026-42934 https://vulnogram.org/CVE-2026-42934 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charset, and charset_map and proxy_pass with disabled buffering ("off") directives are configured, unauthenticated attackers can send re… Medium Network Exploitable Wed, 13 May 2026 14:12:44 GMT https://vulnogram.org/CVE-2026-42945 https://vulnogram.org/CVE-2026-42945 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE)… Critical Network Exploitable Wed, 13 May 2026 14:12:43 GMT https://vulnogram.org/CVE-2026-40701 https://vulnogram.org/CVE-2026-40701 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directive is set to "on" or the leaf parameters are configured with a resolver… Medium Network Exploitable Wed, 13 May 2026 14:12:43 GMT https://vulnogram.org/CVE-2026-40423 https://vulnogram.org/CVE-2026-40423 When a SIP profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. High Network Exploitable Wed, 13 May 2026 14:12:43 GMT https://vulnogram.org/CVE-2026-42930 https://vulnogram.org/CVE-2026-42930 When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP system. Note: Software versions which have reached End of Technical Support (EoTS) are not evalu… High Wed, 13 May 2026 14:12:42 GMT https://vulnogram.org/CVE-2026-24464 https://vulnogram.org/CVE-2026-24464 When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cross a security boundary and delete files. Note: Softw… Medium Wed, 13 May 2026 14:12:42 GMT https://vulnogram.org/CVE-2026-39458 https://vulnogram.org/CVE-2026-39458 When a BIG-IP is configured with DNS caching (Such as a DNS profile with caching enabled, SSL Orchestrator, Advanced WAF DoS protection), undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions whi… High Network Exploitable Wed, 13 May 2026 14:12:42 GMT https://vulnogram.org/CVE-2026-41959 https://vulnogram.org/CVE-2026-41959 Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics commands and in BIG-IP iControl REST. These vulnerabilities may allow an authenticated attacker to view the network status of destination… High Wed, 13 May 2026 14:12:41 GMT https://vulnogram.org/CVE-2026-42406 https://vulnogram.org/CVE-2026-42406 A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running arbitrary commands. Note: Software versions which hav… High Wed, 13 May 2026 14:12:41 GMT https://vulnogram.org/CVE-2026-42058 https://vulnogram.org/CVE-2026-42058 An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information leak of BIG-IP local user account names. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Medium Wed, 13 May 2026 14:12:40 GMT https://vulnogram.org/CVE-2026-32643 https://vulnogram.org/CVE-2026-32643 A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running arbitrary commands. Note: Software versions which hav… High Wed, 13 May 2026 14:12:40 GMT