n
nginx
Security Risk Profile
52
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 97 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 20, 2009 to present
97
Total CVEs
40
Critical+High
2
Exploited
23
Unpatched
Threat Assessment
Avg CVSS
7.2
Base severity
Avg EPSS
4%
Exploit probability
Unpatched
23
Critical/High
Risk Level
52/100
medium
⚠️ 2 Active Exploits⚡ 1 Zero-Days🆕 6Fresh (<7d)📈 11 in Last 30 Days
Severity Distribution
Critical
11High
29Medium
25Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
1<5%
2Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
15
2
Null Pointer Dereference
6
3
Use After Free
5
4
Out-of-bounds Read
1
5
CRLF Injection
1
Most Affected Products
1. F5 Nginx566
2. F5 NGINX Plus165
3. F5 NGINX Ingress Controller60
4. F5 NGINX Open Source47
5. Nginx NGINX Open Source35
Recent Vulnerabilities
See more →CVE-2026-90439
CVSS 6.9medium
NGINX ngx_http_v3_module vulnerability
Sep 15, 2026🔧 No Patch
CVE-2026-78222
CVSS 8.7high
NGINX ngx_http_js_module vulnerability
Sep 2, 2026🔧 No Patch
CVE-2026-78689
CVSS 9.2critical
NGINX ngx_http_js_module vulnerablility
Sep 2, 2026🔧 No Patch
CVE-2026-18329
CVSS 8.8high
NGINX ngx_http_js_module vulnerability
Sep 2, 2026🔧 No Patch
CVE-2026-66362
CVSS 8.6high
NGF vulnerability
Sep 2, 2026🔧 No Patch
CVE-2026-77180
CVSS 8.7high
NGINX Ingress Controller vulnerability
Sep 2, 2026🔧 No Patch
ZDI-CAN-29287
unknown
ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability
Aug 13, 2026🔧 No Patch
REDHAT-BUG-2500992
CVSS 7.0high
Jul 15, 2026🔧 No Patch
CVE-2026-60005
CVSS 8.8high
NGINX ngx_http_slice_module vulnerability
Jul 15, 2026
REDHAT-BUG-2500960
CVSS 4.0medium
Jul 15, 2026🔧 No Patch
Monitor nginx in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.