Known vulnerabilities in NGINX Plus R32 P6

Vendor: F5 Networks
Software: NGINX Plus
Version: R32 P6
Software CPE: cpe:2.3:a:f5_networks:nginx_plus:*:*:*:*:*:*:*:*
Website: https://f5.com/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting NGINX Plus version R32 P6 NGINX Plus R32 P6 is affected by 2 vulnerabilities: 1 critical, 1 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134864 - Out-of-bounds read
CVE-2026-48142		 CWE-125 Medium
No
No
 R36 P6, 37.0.2.1 18.06.2026 SB2026061844
SB2026061845
SB2026061846
and 10 more
#VU132220 - Heap-based Buffer Overflow
CVE-2026-9256		 CWE-122 Critical
Public exploit available
No
 R32 P7, R36 P5, 37.0.1.1 25.05.2026 SB2026052502
SB2026052504
SB2026052505
and 12 more