What’s Vulnerable › Products

F5 Waf vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your F5 Waf version is affected

Latest F5 Waf vulnerabilities

• CVE-2026-60005 — NGINX ngx_http_slice_module vulnerability (CVSS 8.2)
• CVE-2026-60065 — NGINX Plus ngx_stream_mqtt_filter_module vulnerability (CVSS 5.3)
• CVE-2026-56434 — NGINX ngx_http_ssi_module vulnerability (CVSS 6.5)
• CVE-2026-42533 — NGINX Map directive and Regex matching vulnerability (CVSS 8.1)
• CVE-2026-48142 — NGINX ngx_http_charset_module vulnerability (CVSS 4.8)
• CVE-2026-42055 — NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability (CVSS 8.1)
• CVE-2026-9256 — NGINX ngx_http_rewrite_module vulnerability (CVSS 8.1)
• CVE-2026-42946 — NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability (CVSS 7.4)
• CVE-2026-42945 — NGINX ngx_http_rewrite_module vulnerability (CVSS 8.1)
• CVE-2026-42934 — NGINX ngx_http_charset_module vulnerability (CVSS 4.8)
• CVE-2026-40701 — NGINX ngx_http_ssl_module vulnerability (CVSS 4.8)
• CVE-2026-40460 — NGINX ngx_quic_module vulnerability (CVSS 6.5)