Known vulnerabilities in NGINX Open Source
Vendor:
F5 Networks
Software:
NGINX Open Source
Software CPE:
cpe:2.3:a:f5_networks:nginx:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
65
Public exploits:
10
Known exploited (KEV):
1
Breakdown by Severity Chart
0.9.9
1.30.6
1.31.7
1.30.5
1.31.6
1.31.5
1.31.4
1.31.3
1.30.4
1.31.2
1.30.3
1.31.1
1.30.2
1.30.1
1.31.0
1.30.0
1.29.8
1.29.7
1.28.3
1.29.6
1.29.5
1.28.2
1.28.1
1.29.4
1.29.3
1.29.2
1.29.1
1.29.0
1.28.0
1.27.5
1.27.4
1.26.3
1.27.3
1.27.2
1.27.1
1.26.2
1.27.0
1.26.1
1.26.0
1.25.5
1.25.4
1.25.3
1.25.2
1.25.1
1.25.0
1.24.0
1.23.4
1.23.3
1.23.2
1.22.1
1.23.1
1.23.0
1.22.0
1.21.6
1.21.5
1.20.2
1.21.4
1.21.3
1.21.2
1.21.1
1.20.1
1.21.0
1.20.0
1.19.10
1.19.9
1.19.8
1.19.7
1.19.6
1.19.5
1.19.4
1.19.3
1.19.2
1.19.1
1.19.0
1.18.0
1.17.10
1.17.9
1.17.8
1.17.7
1.17.6
1.17.5
1.17.4
1.17.3
1.16.1
1.17.2
1.17.1
1.17.0
1.16.0
1.15.12
1.15.11
1.15.10
1.15.9
1.15.8
1.15.7
1.14.2
1.12.2
1.11.9
1.14.1
1.14.0
1.15.6
1.15.5
1.15.4
1.13.12
1.15.3
1.15.2
1.15.1
1.15.0
1.13.11
1.13.10
1.13.9
1.13.8
1.13.7
1.13.6
1.13.5
1.13.4
1.12.1
1.12.0
1.13.3
1.13.2
1.13.1
1.13.0
1.11.13
1.11.12
1.11.11
1.11.10
1.10.3
1.11.8
1.11.7
1.11.6
1.10.2
1.11.5
1.11.4
0.6.1516
0.5.38
0.5.37
0.5.36
0.5.35
0.5.34
0.5.33
0.5.32
0.5.31
0.5.30
0.5.29
0.5.28
0.5.27
0.5.26
0.8.55
0.8.54
0.7.69
0.7.68
0.7.67
0.7.66
0.7.65
0.7.64
0.7.63
0.7.62
0.7.61
0.7.60
0.6.39
0.6.38
0.6.37
0.6.36
0.6.35
0.6.34
0.6.33
0.6.32
1.0.15
1.0.14
1.0.13
1.0.12
1.0.11
1.0.10
1.0.9
1.0.8
1.0.7
1.0.6
1.2.9
1.2.8
1.2.7
1.2.6
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.4.7
1.4.6
1.4.5
1.4.4
1.4.3
1.4.2
1.4.1
1.6.3
1.6.2
1.6.1
1.6.0
1.8.1
1.8.0
1.11.3
1.9.15
1.9.14
1.9.13
1.9.12
1.9.11
1.9.10
1.9.9
1.9.8
1.9.7
1.9.6
1.9.5
1.9.4
1.9.3
1.9.2
1.9.1
1.9.0
1.7.12
1.7.11
1.7.10
1.7.9
1.7.8
1.7.7
1.7.6
1.7.5
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.5.13
1.5.12
1.5.11
1.5.10
1.5.9
1.5.8
1.5.7
1.5.6
1.5.5
1.5.4
1.5.3
1.5.2
1.5.1
1.5.0
1.4.0
1.3.16
1.3.15
1.3.14
1.3.13
1.3.12
1.3.11
1.3.10
1.3.9
1.3.8
1.3.7
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.0
1.1.19
1.1.18
1.1.17
1.1.16
1.1.15
1.1.14
1.1.13
1.1.12
1.1.11
1.1.10
1.1.9
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
0.9.7
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9.0
0.8.53
0.8.52
0.8.51
0.8.50
0.8.49
0.8.48
0.8.47
0.8.46
0.8.45
0.8.44
0.8.43
0.8.42
0.8.41
0.8.40
0.8.39
0.8.38
0.8.37
0.8.36
0.8.35
0.8.34
0.8.33
0.8.32
0.8.31
0.8.30
0.8.29
0.8.28
0.8.27
0.8.26
0.8.25
0.8.24
0.8.23
0.8.22
0.8.21
0.8.20
0.8.19
0.8.18
0.8.17
0.8.16
0.8.15
0.8.14
0.8.13
0.8.12
0.8.11
0.8.10
0.8.9
0.8.8
0.8.7
0.8.6
0.8.5
0.8.4
0.8.3
0.8.2
0.8.1
0.8.0
0.7.59
0.7.58
0.7.57
0.7.56
0.7.55
0.7.54
0.7.53
0.7.52
0.7.51
0.7.50
0.7.49
0.7.48
0.7.47
0.7.46
0.7.45
0.7.44
0.7.43
0.7.42
0.7.41
0.7.40
0.7.39
0.7.38
0.7.37
0.7.36
0.7.35
0.7.34
0.7.33
0.7.32
0.7.31
0.7.30
0.7.29
0.7.28
0.7.27
0.7.26
0.7.25
0.7.24
0.7.23
0.7.22
0.7.21
0.7.20
0.7.19
0.7.18
0.7.17
0.7.16
0.7.15
0.7.14
0.7.13
0.7.12
0.7.11
0.7.10
0.7.9
0.7.8
0.7.7
0.7.6
0.7.5
0.7.4
0.7.3
0.7.2
0.7.1
0.7.0
0.6.31
0.6.30
0.6.29
0.6.28
0.6.27
0.6.26
0.6.25
0.6.24
0.6.23
0.6.22
0.6.21
0.6.20
0.6.19
0.6.18
0.6.17
0.6.16
0.6.15
0.6.14
0.6.13
0.6.12
0.6.11
0.6.10
0.6.9
0.6.8
0.6.7
0.6.6
0.6.5
0.6.4
0.6.3
0.6.2
0.6.1
0.6.0
0.5.25
0.5.24
0.5.23
0.5.22
0.5.21
0.5.20
0.5.19
0.5.18
0.5.17
0.5.16
0.5.15
0.5.14
0.5.13
0.5.12
0.5.11
0.5.10
0.5.9
0.5.8
0.5.7
0.5.6
0.5.5
0.5.4
0.5.3
0.5.2
0.5.1
0.5.0
0.4.14
0.4.13
0.4.12
0.4.11
0.4.10
0.4.9
0.4.8
0.4.7
0.4.6
0.4.5
0.4.4
0.4.3
0.4.2
0.4.1
0.4.0
0.3.61
0.3.60
0.3.59
0.3.58
0.3.57
0.3.56
0.3.55
0.3.54
0.3.53
0.3.52
0.3.51
0.3.50
0.3.49
0.3.48
0.3.47
0.3.46
0.3.45
0.3.44
0.3.43
0.3.42
0.3.41
0.3.40
0.3.39
0.3.38
0.3.37
0.3.36
0.3.35
0.3.34
0.3.33
0.3.32
0.3.31
0.3.30
0.3.29
0.3.28
0.3.27
0.3.26
0.3.25
0.3.24
0.3.23
0.3.22
0.3.21
0.3.20
0.3.19
0.3.18
0.3.17
0.3.16
0.3.15
0.3.14
0.3.13
0.3.12
0.3.11
0.3.10
0.3.9
0.3.8
0.3.7
0.3.6
0.3.5
0.3.4
0.3.3
0.3.2
0.3.1
0.3.0
0.2.6
0.2.5
0.2.4
0.2.3
0.2.2
0.2.1
0.2.0
0.1.45
0.1.44
0.1.43
0.1.42
0.1.41
0.1.40
0.1.39
0.1.38
0.1.37
0.1.36
0.1.35
0.1.34
0.1.33
0.1.32
0.1.31
0.1.30
0.1.29
0.1.28
0.1.27
0.1.26
0.1.25
0.1.24
0.1.23
0.1.22
0.1.21
0.1.20
0.1.19
0.1.18
0.1.17
0.1.16
0.1.15
0.1.14
0.1.13
0.1.12
0.1.11
0.1.10
0.1.9
0.1.8
0.1.7
0.1.6
0.1.5
0.1.4
0.1.3
0.1.2
0.1.1
0.1.0
1.11.2
1.10.0
1.11.0
1.11.1
1.10.1
Vulnerabilities (65)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU150109 - Heap-based Buffer Overflow CVE-2026-90439 |
CWE-122 | Medium | 1.30.5, 1.31.6 | 15.09.2026 |
SB2026091584 |
||
| #VU137847 - Heap-based Buffer Overflow CVE-2026-42533 |
CWE-122 | High | 1.30.4, 1.31.3 | 16.07.2026 |
SB2026071606 SB20260721112 SB20260721113 and 14 more |
||
| #VU137846 - Use of Uninitialized Resource CVE-2026-60005 |
CWE-908 | High | 1.30.4, 1.31.3 | 16.07.2026 |
SB2026071606 SB20260721112 SB20260721113 and 11 more |
||
| #VU137845 - Use After Free CVE-2026-56434 |
CWE-416 | Medium | 1.30.4, 1.31.3 | 16.07.2026 |
SB2026071606 SB20260721112 SB20260721113 and 11 more |
||
| #VU134864 - Out-of-bounds read CVE-2026-48142 |
CWE-125 | Medium | 1.30.3, 1.31.2 | 18.06.2026 |
SB2026061844 SB2026061845 SB2026061846 and 10 more |
||
| #VU134863 - Use After Free CVE-2026-42530 |
CWE-416 | High | 1.31.2 | 18.06.2026 |
SB2026061844 SB2026061845 SB2026061846 and 2 more |
||
| #VU134861 - Heap-based Buffer Overflow CVE-2026-42055 |
CWE-122 | High | 1.30.3, 1.31.2 | 18.06.2026 |
SB2026061844 SB2026061845 SB2026061846 and 13 more |
||
| #VU133362 - Resource exhaustion CVE-2026-49975 |
CWE-400 | High | 1.29.8 | 04.06.2026 |
SB2026060491 SB2026060492 SB2026060493 and 30 more |
||
| #VU132220 - Heap-based Buffer Overflow CVE-2026-9256 |
CWE-122 | Critical | 1.30.2, 1.31.1 | 25.05.2026 |
SB2026052502 SB2026052504 SB2026052505 and 12 more |
||
| #VU131379 - Use After Free CVE-2026-40701 |
CWE-416 | Medium | 1.30.1 | 14.05.2026 |
SB2026051401 SB2026051497 SB2026051498 and 12 more |
||
| #VU131378 - Authentication Bypass by Spoofing CVE-2026-40460 |
CWE-290 | Medium | 1.30.1 | 14.05.2026 |
SB2026051401 SB2026051497 SB2026051498 and 4 more |
||
| #VU131377 - Heap-based Buffer Overflow CVE-2026-42945 |
CWE-122 | Critical | 1.30.1 | 14.05.2026 |
SB2026051401 SB2026051497 SB2026051498 and 27 more |
||
| #VU131376 - CVE-2026-42926 |
Medium | 1.30.1 | 14.05.2026 |
SB2026051401 SB2026051497 SB2026051498 and 1 more |
|||
| #VU131375 - Uncontrolled Memory Allocation CVE-2026-42946 |
CWE-789 | Medium | 1.30.1 | 14.05.2026 |
SB2026051401 SB2026051497 SB2026051498 and 14 more |
||
| #VU131374 - Out-of-bounds read CVE-2026-42934 |
CWE-125 | Medium | 1.30.1 | 14.05.2026 |
SB2026051401 SB2026051497 SB2026051498 and 12 more |
||
| #VU124482 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-28753 |
CWE-93 | Medium | 1.28.3, 1.29.7 | 25.03.2026 |
SB2026032585 SB20260325200 SB2026041117 and 4 more |
||
| #VU124480 - Integer overflow CVE-2026-27784 |
CWE-190 | High | 1.28.3, 1.29.7 | 25.03.2026 |
SB2026032585 SB20260325200 SB2026040801 and 17 more |
||
| #VU124478 - Heap-based Buffer Overflow CVE-2026-27654 |
CWE-122 | Medium | 1.28.3, 1.29.7 | 25.03.2026 |
SB2026032585 SB20260325200 SB2026033174 and 17 more |
||
| #VU124475 - Out-of-bounds write CVE-2026-32647 |
CWE-787 | High | 1.28.3, 1.29.7 | 25.03.2026 |
SB2026032585 SB20260325200 SB2026040801 and 17 more |
||
| #VU124473 - NULL Pointer Dereference CVE-2026-27651 |
CWE-476 | Medium | 1.28.3, 1.29.7 | 25.03.2026 |
SB2026032585 SB20260325200 SB2026040801 and 17 more |
Showing elements 1 - 20 out of 65