Advisories · Technology

F5 NGINX Open Source.

Every CVE that names F5 NGINX Open Source among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-95101 CVE record

CVSS 6.9 Medium

NGINX ngx_http_v3_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- CWE-172
Not analysed yet 14 Oct 2026
CVE-2026-97205 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

NGINX ngx_http_core_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 14 Oct 2026
CVE-2026-93479 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

NGINX map directive and regex matching vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 14 Oct 2026
CVE-2026-97629 CVE record

CVSS 8.3 High

NGINX ngx_http_ssl_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 14 Oct 2026
CVE-2026-15176 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

NGINX ngx_http_core_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 14 Oct 2026
CVE-2026-90439 CVE record

CVSS 6.9 Medium

NGINX ngx_http_v3_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 15 Sept 2026
CVE-2026-60005 CVE record

CVSS 8.8 High

NGINX ngx_http_slice_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 15 Jul 2026
CVE-2026-56434 CVE record

CVSS 8.3 High

NGINX ngx_http_ssi_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 15 Jul 2026
CVE-2026-42533 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

NGINX Map directive and Regex matching vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 15 Jul 2026
CVE-2026-48142 CVE record

CVSS 6.3 Medium

NGINX ngx_http_charset_module vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- Memory corruption
Not analysed yet 17 Jun 2026
CVE-2026-42055 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- Memory corruption
Not analysed yet 17 Jun 2026
CVE-2026-42530 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

NGINX Open-Source ngx_http_v3_module vulnerability
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 17 Jun 2026
CVE-2026-9256 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

NGINX ngx_http_rewrite_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 22 May 2026
CVE-2026-42926 CVE record

CVSS 6.3 Medium

NGINX ngx_http_proxy_v2_module vulnerability
- F5 NGINX Open Source
- CWE-172
Not analysed yet 13 May 2026
CVE-2026-40460 CVE record

CVSS 6.9 Medium

NGINX ngx_quic_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Authentication bypass
Not analysed yet 13 May 2026
CVE-2026-42946 CVE record

CVSS 8.3 High

NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Denial of service
- CWE-823
Not analysed yet 13 May 2026
CVE-2026-42934 CVE record

CVSS 6.3 Medium

NGINX ngx_http_charset_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 13 May 2026
CVE-2026-42945 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

NGINX ngx_http_rewrite_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 13 May 2026
CVE-2026-40701 CVE record

CVSS 6.3 Medium

NGINX ngx_http_ssl_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 13 May 2026
CVE-2026-27651 CVE record

CVSS 8.7 High

NGINX ngx_mail_auth_http_module vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- Memory corruption
Not analysed yet 24 Mar 2026
CVE-2026-27654 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

NGINX ngx_http_dav_module vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- Memory corruption
Not analysed yet 24 Mar 2026
CVE-2026-28755 CVE record

CVSS 5.3 Medium

NGINX ngx_stream_ssl_module vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- Broken access control
Not analysed yet 24 Mar 2026
CVE-2026-28753 CVE record

CVSS 6.3 Medium

NGINX ngx_mail_proxy_module vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- Other injection
Not analysed yet 24 Mar 2026
CVE-2026-32647 CVE record

CVSS 8.5 High

NGINX ngx_http_mp4_module vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- Memory corruption
Not analysed yet 24 Mar 2026
CVE-2026-27784 CVE record

CVSS 8.5 High

NGINX ngx_http_mp4_module vulnerability
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 24 Mar 2026
CVE-2026-1642 CVE record

CVSS 8.2 High

NGINX vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- CWE-349
Not analysed yet 4 Feb 2026
CVE-2025-53859 CVE record

CVSS 6.3 Medium

NGINX ngx_mail_smtp_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 13 Aug 2025
CVE-2025-23419 CVE record

CVSS 5.3 Medium

TLS Session Resumption Vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- Broken access control
Not analysed yet 5 Feb 2025
CVE-2024-7347 CVE record

CVSS 5.7 Medium

NGINX MP4 module vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- CWE-126
Not analysed yet 14 Aug 2024
CVE-2024-34161 CVE record

CVSS 5.3 Medium

NGINX HTTP/3 QUIC vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- Memory corruption
Not analysed yet 29 May 2024
CVE-2024-35200 CVE record

CVSS 5.3 Medium

NGINX HTTP/3 QUIC vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- Memory corruption
Not analysed yet 29 May 2024
CVE-2024-32760 CVE record

CVSS 6.5 Medium

NGINX HTTP/3 QUIC vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- Memory corruption
Not analysed yet 29 May 2024
CVE-2024-31079 CVE record

CVSS 4.8 Medium

NGINX HTTP/3 QUIC vulnerability
- F5 NGINX Open Source
- F5 NGINX Plus
- Memory corruption
Not analysed yet 29 May 2024
CVE-2024-24990 CVE record

CVSS 7.5 High

NGINX HTTP/3 QUIC vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 14 Feb 2024
CVE-2024-24989 CVE record

CVSS 7.5 High

NGINX HTTP/3 QUIC vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Memory corruption
Not analysed yet 14 Feb 2024