Known vulnerabilities in NGINX Open Source - page 2

Software CPE: cpe:2.3:a:f5_networks:nginx:*:*:*:*:*:*:*:*
Total vulnerabilities: 59
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NGINX Open Source NGINX Open Source is affected by 59 known vulnerabilities: 2 critical, 11 high, 43 medium, 3 low Critical High Medium Low

Vulnerabilities (59)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-1642
CWE-349 Medium
No
No
1.28.2, 1.29.5 05.02.2026 SB2026020501
SB2026020505
SB2026020511
and 22 more
#VU114082 - Out-of-bounds read
CVE-2025-53859
CWE-125 Low
No
No
1.29.1 14.08.2025 SB2025081427
SB2025082564
SB2025082961
and 12 more
#VU103686 - Improper Authentication
CVE-2025-23419
CWE-287 Low
No
No
1.26.3, 1.27.4 06.02.2025 SB2025020653
SB2025020670
SB2025020671
and 17 more
#VU96020 - Out-of-bounds read
CVE-2024-7347
CWE-125 Medium
No
No
1.26.2, 1.27.1 14.08.2024 SB2024081481
SB2024081706
SB2024081707
and 25 more
#VU90995 - NULL Pointer Dereference
CVE-2024-35200
CWE-476 Medium
No
No
1.26.1 04.06.2024 SB2024060431
SB2024083007
SB2026052221
#VU90994 - Use After Free
CVE-2024-34161
CWE-416 Medium
No
No
1.26.1 04.06.2024 SB2024060431
SB2024083007
SB2026052221
#VU90993 - Out-of-bounds write
CVE-2024-32760
CWE-787 Medium
No
No
1.26.1 04.06.2024 SB2024060431
SB2024083007
SB20241015123
and 1 more
#VU90991 - Stack-based buffer overflow
CVE-2024-31079
CWE-121 Medium
No
No
1.26.1 04.06.2024 SB2024060431
SB2024083007
SB2026052221
#VU86558 - NULL Pointer Dereference
CVE-2024-24989
CWE-476 Medium
No
No
1.25.4 16.02.2024 SB2024021636
SB2024022701
SB2024092806
and 1 more
#VU86557 - Use After Free
CVE-2024-24990
CWE-416 Medium
No
No
1.25.4 16.02.2024 SB2024021636
SB2024022701
SB2024092806
and 1 more
#VU76699 - Integer overflow
CVE-2017-20005
CWE-190 High
No
No
1.13.6 31.05.2023 SB2021060735
SB2024080137
SB2024080138
and 2 more
#VU68495 - Out-of-bounds read
CVE-2022-41742
CWE-125 Medium
No
No
1.22.1, 1.23.2 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 34 more
#VU68494 - Out-of-bounds read
CVE-2022-41741
CWE-125 Medium
No
No
1.22.1, 1.23.2 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 32 more
#VU59319 - Origin Validation Error
CVE-2021-3618
CWE-346 Medium
No
No
1.21.0 09.01.2022 SB2022010903
SB2022010904
SB2022010905
and 37 more
#VU53543 - Off-by-one Error
CVE-2021-23017
CWE-193 High
Available
No
1.20.1 25.05.2021 SB2021052543
SB2021052713
SB2021052901
and 48 more
#VU26234 - Out-of-bounds read
CWE-125 Medium
Available
No
1.17.7 19.03.2020 SB2020031927
#VU24230 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20372
CWE-444 Medium
Available
No
1.17.7 13.01.2020 SB2020011323
SB2020011324
SB2020021002
and 10 more
#VU20198 - Resource exhaustion
CVE-2019-9516
CWE-400 Medium
No
No
1.16.1, 1.17.3 13.08.2019 SB2019081323
SB2019081602
SB2019081606
and 41 more
#VU20197 - Resource exhaustion
CVE-2019-9513
CWE-400 Medium
No
No
1.16.1, 1.17.3 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 51 more
#VU20196 - Resource exhaustion
CVE-2019-9511
CWE-400 Medium
No
No
1.16.1, 1.17.3 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 55 more


Showing elements 21 - 40 out of 59