Known vulnerabilities in NGINX Ingress Controller
Vendor:
F5 Networks
Software:
NGINX Ingress Controller
Software CPE:
cpe:2.3:a:f5_networks:nginx_ingress_controller:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
5.5.4
5.5.3
5.5.2
5.5.1
5.5.0
5.4.3
5.4.2
5.4.1
5.4.0
5.3.4
5.3.3
5.3.2
5.3.1
5.3.0
5.2.1
5.2.0
5.1.1
5.1.0
5.0.0
4.0.1
4.0.0
3.7.2
3.7.1
3.7.0
3.6.2
3.6.1
3.6.0
3.5.2
3.5.1
3.5.0
3.4.3
3.4.2
3.4.1
3.4.0
3.3.2
3.3.1
3.3.0
3.2.1
3.2.0
3.1.1
3.1.0
3.0.2
3.0.1
3.0.0
2.4.2
2.4.1
2.4.0
2.3.1
1.12.5
1.11.3
1.0.0
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.2.0
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
1.9.1
2.0.0
2.0.1
2.0.2
2.0.3
2.1.0
2.1.1
2.1.2
2.2.0
2.2.1
2.2.2
2.3.0
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2026-1642 |
CWE-349 | Medium | - | 05.02.2026 | - | ||
| #VU120226 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-14727 |
CWE-22 | Medium | 5.3.1 | 19.12.2025 |
SB2025121946 |
||
| #VU100049 - Session Fixation CVE-2024-10318 |
CWE-384 | Low | 3.7.1 | 07.11.2024 |
SB2024110735 |
||
| #VU66171 - Improper input validation CVE-2022-30535 |
CWE-20 | Medium | 2.3.0 | 08.08.2022 |
SB2022080811 |