Known vulnerabilities in NGINX Instance Manager
Vendor:
F5 Networks
Software:
NGINX Instance Manager
Software CPE:
cpe:2.3:a:f5_networks:nginx_instance_manager:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
8
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
2.23.0
2.24.0
2.22.0
2.21.1
2.21.0
2.20.1
2.20.0
2.19.3
2.19.2
2.19.1
2.19.0
2.18.1
2.18.0
2.17.4
2.17.3
2.17.2
2.17.1
2.17.0
2.16.0
2.15.1
2.15.0
2.14.1
2.14.0
2.13.1
2.13.0
2.12.0
2.11.0
2.10.1
2.10.0
2.9.1
2.9.0
2.8.0
2.7.0
2.6.0
2.5.1
2.5.0
2.4.0
note: when f5 designates the eos for a product
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
2.0.0
2.0.1
2.1.0
2.2.0
2.3.0
2.3.1
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU155772 - Use After Free CVE-2026-97205 |
CWE-416 | High | 2.24.0 | 14.10.2026 |
SB2026101477 SB2026102272 |
||
| #VU155771 - Heap-based Buffer Overflow CVE-2026-15176 |
CWE-122 | High | 2.24.0 | 14.10.2026 |
SB2026101477 SB2026102272 |
||
| #VU155770 - Use of Uninitialized Resource CVE-2026-97629 |
CWE-908 | Medium | 2.24.0 | 14.10.2026 |
SB2026101477 SB2026102272 |
||
| #VU155769 - Encoding Error CVE-2026-95101 |
CWE-172 | Medium | 2.24.0 | 14.10.2026 |
SB2026101477 SB2026102272 |
||
| #VU155768 - Heap-based Buffer Overflow CVE-2026-93479 |
CWE-122 | High | 2.24.0 | 14.10.2026 |
SB2026101477 SB2026102272 |
||
| #VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2026-1642 |
CWE-349 | Medium | - | 05.02.2026 |
SB2026020501 SB2026020505 SB2026020511 and 22 more |
||
| #VU100049 - Session Fixation CVE-2024-10318 |
CWE-384 | Low | 2.17.4 | 07.11.2024 |
SB2024110735 |
||
| #VU66175 - Resource exhaustion CVE-2022-35241 |
CWE-400 | Medium | 2.3.1 | 08.08.2022 |
SB2022080813 |