Known vulnerabilities in NGINX Gateway Fabric

Known vulnerabilities in NGINX Gateway Fabric

Vendor: F5 Networks

Software: NGINX Gateway Fabric

Software CPE: cpe:2.3:a:f5_networks:nginx_gateway_fabric:*:*:*:*:*:*:*:*

Website: https://f5.com/

Total vulnerabilities: 12

Public exploits: 0

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU155772 - Use After Free CVE-2026-97205	CWE-416	High	No	No	2.8.0	14.10.2026	SB2026101477 SB2026102272
#VU155771 - Heap-based Buffer Overflow CVE-2026-15176	CWE-122	High	No	No	2.8.0	14.10.2026	SB2026101477 SB2026102272
#VU155770 - Use of Uninitialized Resource CVE-2026-97629	CWE-908	Medium	No	No	2.8.0	14.10.2026	SB2026101477 SB2026102272
#VU155769 - Encoding Error CVE-2026-95101	CWE-172	Medium	No	No	2.8.0	14.10.2026	SB2026101477 SB2026102272
#VU155768 - Heap-based Buffer Overflow CVE-2026-93479	CWE-122	High	No	No	2.8.0	14.10.2026	SB2026101477 SB2026102272
#VU155765 - Improper Neutralization of Equivalent Special Elements CVE-2026-91184	CWE-76	Medium	No	No	2.8.0	14.10.2026	SB2026101475
#VU155763 - Authentication Bypass by Spoofing CVE-2026-96615	CWE-290	Low	No	No	2.8.0	14.10.2026	SB2026101475
#VU147234 - Improper Neutralization of Equivalent Special Elements CVE-2026-66362	CWE-76	Medium	No	No	2.6.8	07.09.2026	SB2026090747
#VU134862 - Improper Neutralization of Equivalent Special Elements CVE-2026-11311	CWE-76	Medium	No	No	2.6.4	18.06.2026	SB2026061843
#VU134860 - Improper Neutralization of Equivalent Special Elements CVE-2026-50107	CWE-76	Medium	No	No	2.6.4	18.06.2026	SB2026061843
#VU134859 - Improper Validation of Array Index CVE-2026-32682	CWE-129	Low	No	No	2.6.4	18.06.2026	SB2026061843
#VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2026-1642	CWE-349	Medium	No	No	-	05.02.2026	SB2026020501 SB2026020505 SB2026020511 and 22 more