What’s Vulnerable › Products
F5 NGINX Plus vulnerabilities
36 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 26 published in the last 12 months.
Check whether your F5 NGINX Plus version is affected
Exploited F5 NGINX Plus vulnerabilities
- CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability
Latest F5 NGINX Plus vulnerabilities
- CVE-2026-97629 — NGINX ngx_http_ssl_module vulnerability (CVSS 6.5)
- CVE-2026-97205 — NGINX ngx_http_core_module vulnerability (CVSS 8.1)
- CVE-2026-95101 — NGINX ngx_http_v3_module vulnerability (CVSS 5.3)
- CVE-2026-93479 — NGINX map directive and regex matching vulnerability (CVSS 8.1)
- CVE-2026-15176 — NGINX ngx_http_core_module vulnerability (CVSS 8.1)
- CVE-2026-90439 — NGINX ngx_http_v3_module vulnerability (CVSS 6.5)
- CVE-2026-60005 — NGINX ngx_http_slice_module vulnerability (CVSS 8.2)
- CVE-2026-60065 — NGINX Plus ngx_stream_mqtt_filter_module vulnerability (CVSS 5.3)
- CVE-2026-56434 — NGINX ngx_http_ssi_module vulnerability (CVSS 6.5)
- CVE-2026-42533 — NGINX Map directive and Regex matching vulnerability (CVSS 8.1)
- CVE-2026-48142 — NGINX ngx_http_charset_module vulnerability (CVSS 4.8)
- CVE-2026-42055 — NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability (CVSS 8.1)
- CVE-2026-9256 — NGINX ngx_http_rewrite_module vulnerability (CVSS 8.1)
- CVE-2026-42946 — NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability (CVSS 7.4)
- CVE-2026-42945 — NGINX ngx_http_rewrite_module vulnerability (CVSS 8.1)
- CVE-2026-42934 — NGINX ngx_http_charset_module vulnerability (CVSS 4.8)
- CVE-2026-40701 — NGINX ngx_http_ssl_module vulnerability (CVSS 4.8)
- CVE-2026-40460 — NGINX ngx_quic_module vulnerability (CVSS 6.5)
- CVE-2026-32647 — NGINX ngx_http_mp4_module vulnerability (CVSS 7.8)
- CVE-2026-28755 — NGINX ngx_stream_ssl_module vulnerability (CVSS 5.4)
- CVE-2026-28753 — NGINX ngx_mail_proxy_module vulnerability (CVSS 3.7)
- CVE-2026-27654 — NGINX ngx_http_dav_module vulnerability (CVSS 8.2)
- CVE-2026-27651 — NGINX ngx_mail_auth_http_module vulnerability (CVSS 7.5)
- CVE-2026-1642 — NGINX vulnerability (CVSS 5.9)
- CVE-2025-53859 — NGINX ngx_mail_smtp_module vulnerability (CVSS 3.7)