What’s Vulnerable › Products

F5 NGINX Ingress Controller vulnerabilities

28 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 22 published in the last 12 months.

Check whether your F5 NGINX Ingress Controller version is affected

Exploited F5 NGINX Ingress Controller vulnerabilities

• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability

Latest F5 NGINX Ingress Controller vulnerabilities

• CVE-2026-94197 — NGINX Ingress Controller vulnerability (CVSS 7.5)
• CVE-2026-104939 — NGINX Ingress Controller vulnerability (CVSS 7.5)
• CVE-2026-77180 — NGINX Ingress Controller vulnerability (CVSS 8.3)
• CVE-2026-60005 — NGINX ngx_http_slice_module vulnerability (CVSS 8.2)
• CVE-2026-60065 — NGINX Plus ngx_stream_mqtt_filter_module vulnerability (CVSS 5.3)
• CVE-2026-56434 — NGINX ngx_http_ssi_module vulnerability (CVSS 6.5)
• CVE-2026-55723 — NGINX Ingress Controller vulnerability (CVSS 8.3)
• CVE-2026-52865 — NGINX Ingress Controller vulnerability (CVSS 6.5)
• CVE-2026-42533 — NGINX Map directive and Regex matching vulnerability (CVSS 8.1)
• CVE-2026-48142 — NGINX ngx_http_charset_module vulnerability (CVSS 4.8)
• CVE-2026-42530 — NGINX Open-Source ngx_http_v3_module vulnerability (CVSS 8.1)
• CVE-2026-42055 — NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability (CVSS 8.1)
• CVE-2026-9256 — NGINX ngx_http_rewrite_module vulnerability (CVSS 8.1)
• CVE-2026-42946 — NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability (CVSS 7.4)
• CVE-2026-42945 — NGINX ngx_http_rewrite_module vulnerability (CVSS 8.1)
• CVE-2026-42934 — NGINX ngx_http_charset_module vulnerability (CVSS 4.8)
• CVE-2026-42926 — NGINX ngx_http_proxy_v2_module vulnerability (CVSS 5.8)
• CVE-2026-40701 — NGINX ngx_http_ssl_module vulnerability (CVSS 4.8)
• CVE-2026-40460 — NGINX ngx_quic_module vulnerability (CVSS 6.5)
• CVE-2026-1642 — NGINX vulnerability (CVSS 5.9)
• CVE-2025-14727 — NGINX Ingress Controller vulnerability (CVSS 8.3)
• CVE-2024-10318 — NGINX OpenID Connect Vulnerability (CVSS 5.4)
• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited
• CVE-2022-41743 — NGINX ngx_http_hls_module vulnerability CVE-2022-41743 (CVSS 7.0)
• CVE-2022-41742 — NGINX ngx_http_mp4_module vulnerability CVE-2022-41742 (CVSS 7.1)