Recently modified vulnerabilities for "f5 nginx plus" r32

Where

AND

Sort:

Nginx NGINX Open SourceNGINX ngx_http_rewrite_module vulnerability

Risk 88

Severity

9.2

Buffer Overflow

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Last updated 6 June 2026

1 / 4

Source: Ubuntu

First published (updated )

CVE-2026-42945

Nginx NGINX Open SourceNGINX ngx_http_rewrite_module vulnerability

Risk 62

Severity

9.2

EPSS

10.86%

Buffer Overflow

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Last updated 6 June 2026

1 / 5

Source: Ubuntu

First published (updated )

CVE-2026-9256

F5 NGINX PlusNGINX ngx_mail_auth_http_module vulnerability

Risk 51

Severity

8.7

Null Pointer Dereference

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 6 June 2026

1 / 5

Source: Ubuntu

First published (updated )

CVE-2026-27651

debian/nginxTLS Session Resumption Vulnerability

Risk 19

Severity

5.3

EPSS

0.04%

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Last updated 24 February 2025

1 / 5

Source: Ubuntu

First published (updated )

CVE-2025-23419

Nginx NGINX PlusNGINX ngx_quic_module vulnerability

Risk 43

Severity

6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Last updated 2 June 2026

1 / 3

Source: Ubuntu

First published (updated )

CVE-2026-40460

F5 NGINX PlusNGINX ngx_http_ssl_module vulnerability

Risk 39

Severity

6.3

Use After Free

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Last updated 6 June 2026

1 / 5

Source: Ubuntu

First published (updated )

CVE-2026-40701

Nginx NGINX ngx_http_scgi_moduleNGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability

Risk 55

Severity

8.3

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L

A vulnerability exists in the ngxhttpscgimodule and ngxhttpuwsgimodule modules that may result in excessive memory allocation or an over-read of data. When scgipass or uwsgipass is configured, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to read the memory of the NGINX worker process or restart it. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

1 / 3

Source: NVD

First published (updated )

CVE-2026-42946

Nginx NGINX Open SourceNGINX ngx_http_charset_module vulnerability

Risk 39

Severity

6.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Last updated 6 June 2026

1 / 5

Source: Ubuntu

First published (updated )

CVE-2026-42934

Nginx NGINX OSSNGINX vulnerability

Risk 47

Severity

8.2

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response from an upstream proxied server.

1 / 3

Source: F5

First published (updated )

CVE-2026-1642

F5 NGINX PlusNGINX MP4 module vulnerability

Risk 24

Severity

5.7

EPSS

0.04%

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Last updated 14 October 2024

1 / 4

Source: Ubuntu

First published (updated )

CVE-2024-7347

Trending

Nginx NGINX Open SourceNGINX ngx_http_rewrite_module vulnerability

Nginx NGINX Open SourceNGINX ngx_http_rewrite_module vulnerability

F5 NGINX PlusNGINX ngx_mail_auth_http_module vulnerability

debian/nginxTLS Session Resumption Vulnerability

Nginx NGINX PlusNGINX ngx_quic_module vulnerability

F5 NGINX PlusNGINX ngx_http_ssl_module vulnerability

Nginx NGINX ngx_http_scgi_moduleNGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability

Nginx NGINX Open SourceNGINX ngx_http_charset_module vulnerability

Nginx NGINX OSSNGINX vulnerability

F5 NGINX PlusNGINX MP4 module vulnerability

Company

Resources

Contact