Known vulnerabilities in NGINX Plus R36 P4
Vendor:
F5 Networks
Software:
NGINX Plus
Version:
R36 P4
Software CPE:
cpe:2.3:a:f5_networks:nginx_plus:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Vulnerabilities by Severity
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU137847 - Heap-based Buffer Overflow CVE-2026-42533 |
CWE-122 | High | R36 P7, 37.0.3.1 | 16.07.2026 |
SB2026071606 SB20260721112 SB20260721113 and 8 more |
||
| #VU137846 - Use of Uninitialized Resource CVE-2026-60005 |
CWE-908 | High | R36 P7, 37.0.3.1 | 16.07.2026 |
SB2026071606 SB20260721112 SB20260721113 and 6 more |
||
| #VU137845 - Use After Free CVE-2026-56434 |
CWE-416 | Medium | R36 P7, 37.0.3.1 | 16.07.2026 |
SB2026071606 SB20260721112 SB20260721113 and 6 more |
||
| #VU134864 - Out-of-bounds read CVE-2026-48142 |
CWE-125 | Medium | R36 P6, 37.0.2.1 | 18.06.2026 |
SB2026061844 SB2026061845 SB2026061846 and 10 more |
||
| #VU134861 - Heap-based Buffer Overflow CVE-2026-42055 |
CWE-122 | High | R36 P6, 37.0.2.1 | 18.06.2026 |
SB2026061844 SB2026061845 SB2026061846 and 12 more |
||
| #VU132220 - Heap-based Buffer Overflow CVE-2026-9256 |
CWE-122 | Critical | R32 P7, R36 P5, 37.0.1.1 | 25.05.2026 |
SB2026052502 SB2026052504 SB2026052505 and 12 more |