f5 nginx ingress controller

Name: f5 nginx ingress controller
Brand: f5

productUS

cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical6high4medium0low

updated 2026-10-27

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	2 versions
CVE-2026-42945US	—	68.0% (99th)	Exploit	no fix	2026-05-13	3 versions
CVE-2026-9256US	—	10.9% (96th)	Exploit	5.4.3	2026-05-22	3 versions
CVE-2026-42055US	—	6.54% (94th)	Exploit	no fix	2026-06-17	3 versions
CVE-2026-42530US	—	6.45% (94th)	Exploit	5.5.1	2026-06-17	4 versions
CVE-2026-42533US	—	0.89% (59th)	Exploit	5.5.3	2026-07-15	5 versions
CVE-2022-41741US	high7.8	0.81% (57th)	Exploit	no fix	2022-10-19	2 versions
CVE-2026-40701US	—	0.69% (53rd)	Exploit	no fix	2026-05-13	3 versions
CVE-2026-42926US	—	0.35% (28th)	Exploit	no fix	2026-05-13	3 versions
CVE-2022-41742US	high7.1	1.18% (68th)	—	no fix	2022-10-19	2 versions
CVE-2026-42946US	high7.4	0.93% (61st)	—	no fix	2026-05-13	3 versions
CVE-2021-23055US	medium6.5	0.77% (55th)	—	1.12.3	2022-04-21	2 versions
CVE-2026-42934US	—	0.73% (54th)	—	no fix	2026-05-13	3 versions
CVE-2022-30535US	medium6.5	0.71% (54th)	—	2.3.0	2022-08-04	1.0.0 → 2.3.0
CVE-2026-48142US	—	0.68% (52nd)	—	no fix	2026-06-17	3 versions
CVE-2026-60005US	high8.2	0.53% (45th)	—	5.5.3	2026-07-15	5 versions
CVE-2026-55723US	—	0.51% (43rd)	—	5.5.2	2026-07-15	3 versions
CVE-2026-52865US	—	0.50% (43rd)	—	5.5.2	2026-07-15	3 versions
CVE-2026-60065US	medium5.3	0.45% (39th)	—	2026-lts-r4	2026-07-15	5 versions
CVE-2025-14727US	—	0.43% (37th)	—	no fix	2025-12-17	= 5.3.0
CVE-2026-56434US	—	0.42% (36th)	—	2026-lts-r4	2026-07-15	5 versions
CVE-2026-1642US	—OT elevated	0.39% (32nd)	—	5.3.3	2026-02-04	3 versions
CVE-2026-40460US	—	0.37% (31st)	—	no fix	2026-05-13	3 versions
CVE-2024-10318US	medium5.4	0.37% (31st)	—	3.7.1	2024-11-06	3 versions
CVE-2022-41743US	high7.0	0.23% (14th)	—	no fix	2022-10-19	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-416Use After Free3 CVEs
CWE-131Incorrect Calculation of Buffer Size2 CVEs
CWE-172Encoding Error1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan