Known vulnerabilities in NGINX Plus R36 P6

Software: NGINX Plus
Version: R36 P6
Software CPE: cpe:2.3:a:f5_networks:nginx_plus:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting NGINX Plus version R36 P6 NGINX Plus R36 P6 is affected by 3 vulnerabilities: 2 high, 1 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137847 - Heap-based Buffer Overflow
CVE-2026-42533
CWE-122 High
No
No
R36 P7, 37.0.3.1 16.07.2026 SB2026071606
SB20260721112
SB20260721113
and 8 more
#VU137846 - Use of Uninitialized Resource
CVE-2026-60005
CWE-908 High
No
No
R36 P7, 37.0.3.1 16.07.2026 SB2026071606
SB20260721112
SB20260721113
and 6 more
#VU137845 - Use After Free
CVE-2026-56434
CWE-416 Medium
No
No
R36 P7, 37.0.3.1 16.07.2026 SB2026071606
SB20260721112
SB20260721113
and 6 more