Known vulnerabilities in NGINX Ingress Controller

Software CPE: cpe:2.3:a:f5_networks:nginx_ingress_controller:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NGINX Ingress Controller NGINX Ingress Controller is affected by 12 known vulnerabilities: 3 high, 8 medium, 1 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155772 - Use After Free
CVE-2026-97205
CWE-416 High
No
No
5.7.0 14.10.2026 SB2026101477
SB2026102272
#VU155771 - Heap-based Buffer Overflow
CVE-2026-15176
CWE-122 High
No
No
5.7.0 14.10.2026 SB2026101477
SB2026102272
#VU155770 - Use of Uninitialized Resource
CVE-2026-97629
CWE-908 Medium
No
No
5.7.0 14.10.2026 SB2026101477
SB2026102272
#VU155769 - Encoding Error
CVE-2026-95101
CWE-172 Medium
No
No
5.7.0 14.10.2026 SB2026101477
SB2026102272
#VU155768 - Heap-based Buffer Overflow
CVE-2026-93479
CWE-122 High
No
No
5.7.0 14.10.2026 SB2026101477
SB2026102272
#VU155766 - Incorrect Implementation of Authentication Algorithm
CVE-2026-104939
CWE-303 Medium
No
No
5.7.0 14.10.2026 SB2026101476
#VU155764 - Authentication Bypass by Spoofing
CVE-2026-94197
CWE-290 Medium
No
No
5.7.0 14.10.2026 SB2026101476
#VU147231 - Improper Neutralization of Equivalent Special Elements
CVE-2026-77180
CWE-76 Medium
No
No
5.6.0, 2026-lts-r5 07.09.2026 SB2026090742
#VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-1642
CWE-349 Medium
No
No
- 05.02.2026 SB2026020501
SB2026020505
SB2026020511
and 22 more
#VU120226 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-14727
CWE-22 Medium
No
No
5.3.1 19.12.2025 SB2025121946
#VU100049 - Session Fixation
CVE-2024-10318
CWE-384 Low
No
No
3.7.1 07.11.2024 SB2024110735
#VU66171 - Improper input validation
CVE-2022-30535
CWE-20 Medium
No
No
2.3.0 08.08.2022 SB2022080811