Known vulnerabilities in NGINX Ingress Controller
Vendor:
F5 Networks
Software:
NGINX Ingress Controller
Software CPE:
cpe:2.3:a:f5_networks:nginx_ingress_controller:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
5.6.3
5.6.2
5.6.1
2026-lts-r4
2026-lts-r3
2026-lts-r2
2026-lts-r1
5.6.0
2026-lts-r5
5.5.4
5.5.3
5.5.2
5.5.1
5.5.0
5.4.3
5.4.2
5.4.1
5.4.0
5.3.4
5.3.3
5.3.2
5.3.1
5.3.0
5.2.1
5.2.0
5.1.1
5.1.0
5.0.0
4.0.1
4.0.0
3.7.2
3.7.1
3.7.0
3.6.2
3.6.1
3.6.0
3.5.2
3.5.1
3.5.0
3.4.3
3.4.2
3.4.1
3.4.0
3.3.2
3.3.1
3.3.0
3.2.1
3.2.0
3.1.1
3.1.0
3.0.2
3.0.1
3.0.0
2.4.2
2.4.1
2.4.0
2.3.1
1.12.5
1.11.3
1.0.0
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.2.0
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
1.9.1
2.0.0
2.0.1
2.0.2
2.0.3
2.1.0
2.1.1
2.1.2
2.2.0
2.2.1
2.2.2
2.3.0
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU147231 - Improper Neutralization of Equivalent Special Elements CVE-2026-77180 |
CWE-76 | Medium | 5.6.0, 2026-lts-r5 | 07.09.2026 |
SB2026090742 |
||
| #VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2026-1642 |
CWE-349 | Medium | - | 05.02.2026 |
SB2026020501 SB2026020505 SB2026020511 and 22 more |
||
| #VU120226 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-14727 |
CWE-22 | Medium | 5.3.1 | 19.12.2025 |
SB2025121946 |
||
| #VU100049 - Session Fixation CVE-2024-10318 |
CWE-384 | Low | 3.7.1 | 07.11.2024 |
SB2024110735 |
||
| #VU66171 - Improper input validation CVE-2022-30535 |
CWE-20 | Medium | 2.3.0 | 08.08.2022 |
SB2022080811 |