f5 nginx plus

Name: f5 nginx plus
Brand: f5

productUS

cpe:2.3:a:f5:nginx_plus:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical11high12medium1low

updated 2026-10-28

vulnerabilities (56)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	r29	2023-10-10	3 versions
CVE-2026-42945US	—	68.0% (99th)	Exploit	no fix	2026-05-13	r32 → r36
CVE-2026-27654US	—	25.9% (98th)	Exploit	no fix	2026-03-24	5 versions
CVE-2019-5010US	high7.5	20.7% (98th)	Exploit	no fix	2019-10-31	—
CVE-2026-9256US	—	10.9% (96th)	Exploit	r36	2026-05-22	4 versions
CVE-2025-20029US	—	7.15% (94th)	Exploit	no fix	2025-02-05	—
CVE-2026-42055US	—	6.54% (94th)	Exploit	r36	2026-06-17	3 versions
CVE-2025-23419US	—OT elevated	2.79% (86th)	Exploit	r32	2025-02-05	4 versions
CVE-2022-26488US	high7.0	1.49% (74th)	Exploit	no fix	2022-03-10	—
CVE-2026-42533US	—	0.89% (59th)	Exploit	r36	2026-07-15	3 versions
CVE-2026-40701US	—	0.69% (53rd)	Exploit	no fix	2026-05-13	r32 → r36
CVE-2026-28755US	medium5.4OT elevated	0.14% (3rd)	Exploit	no fix	2026-03-24	4 versions
CVE-2024-56337US	—	8.97% (95th)	—	no fix	2024-12-20	—
CVE-2014-0064US	medium6.5	5.35% (93rd)	—	no fix	2014-03-31	—
CVE-2019-16056US	high7.5OT elevated	5.12% (92nd)	—	no fix	2019-09-06	—
CVE-2014-0065US	medium6.5	5.05% (92nd)	—	no fix	2014-03-31	—
CVE-2014-0066US	medium4.0	4.68% (92nd)	—	no fix	2014-03-31	—
CVE-2024-24989US	high7.5	1.06% (64th)	—	no fix	2024-02-14	= r31
CVE-2026-27651US	—	0.95% (61st)	—	r35	2026-03-24	4 versions
CVE-2024-35200US	medium5.3	0.93% (61st)	—	no fix	2024-05-29	2 versions
CVE-2026-32647US	—	0.93% (61st)	—	no fix	2026-03-24	5 versions
CVE-2026-42946US	high7.4	0.93% (61st)	—	no fix	2026-05-13	r32 → r36
CVE-2024-24990US	high7.5	0.91% (60th)	—	no fix	2024-02-14	2 versions
CVE-2024-31079US	medium4.8	0.89% (59th)	—	no fix	2024-05-29	2 versions
CVE-2024-34161US	medium5.3	0.87% (59th)	—	no fix	2024-05-29	2 versions
CVE-2024-32760US	medium6.5	0.86% (58th)	—	no fix	2024-05-29	2 versions
CVE-2025-23239US	high8.7	0.76% (55th)	—	no fix	2025-02-05	—
CVE-2026-42934US	—	0.73% (54th)	—	no fix	2026-05-13	r32 → r36
CVE-2026-48142US	—	0.68% (52nd)	—	37.0.2.1	2026-06-17	3 versions
CVE-2024-39792US	high7.5	0.63% (50th)	—	no fix	2024-08-14	3 versions
CVE-2026-60005US	high8.2	0.53% (45th)	—	r36	2026-07-15	3 versions
CVE-2014-0067US	medium4.6	0.48% (42nd)	—	no fix	2014-03-31	—
CVE-2025-21091US	—	0.45% (39th)	—	no fix	2025-02-05	—
CVE-2026-60065US	medium5.3	0.45% (39th)	—	r36	2026-07-15	3 versions
CVE-2025-24320US	—	0.43% (38th)	—	no fix	2025-02-05	—
CVE-2026-56434US	—	0.42% (36th)	—	37.0.3.1	2026-07-15	3 versions
CVE-2025-53859US	—	0.41% (36th)	—	no fix	2025-08-13	5 versions
CVE-2025-24497US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-24326US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-23412US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-22891US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-22846US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-21087US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-20058US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-20045US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-24312US	—	0.40% (34th)	—	no fix	2025-02-05	—
CVE-2025-24319US	medium6.5	0.39% (33rd)	—	no fix	2025-02-05	—
CVE-2026-1642US	—OT elevated	0.39% (32nd)	—	r35	2026-02-04	6 versions
CVE-2026-40460US	—	0.37% (31st)	—	no fix	2026-05-13	r32 → r36
CVE-2024-7347US	medium4.7	0.32% (25th)	—	r31	2024-08-14	3 versions

showing 50 of 56

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read7 CVEs
CWE-476NULL Pointer Dereference6 CVEs
CWE-122Heap-based Buffer Overflow5 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-404Improper Resource Shutdown or Release4 CVEs
CWE-416Use After Free4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs

sources (2)

Which sources assert this record, and when.

USNVD / CVE30 CVEs
NLNCSC-NL (CSAF)27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan