NGINX NGINX Plus
productDEA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
critical
by severity
0critical10high5medium0low
updated 2026-10-28
01
vulnerabilities (21)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2026-42945US | — | Exploit |
| CVE-2026-42055US | — | Exploit |
| CVE-2025-23419US | —OT elevated | Exploit |
| CVE-2026-42533US | — | Exploit |
| CVE-2026-15176US | high8.1 | Exploit |
| CVE-2026-97205US | high8.1 | Exploit |
| CVE-2022-41741US | high7.8 | Exploit |
| CVE-2026-97629US | medium6.5 | Exploit |
| CVE-2022-41742US | high7.1 | — |
| CVE-2024-24989US | high7.5 | — |
| CVE-2026-93479US | high8.1 | — |
| CVE-2024-24990US | high7.5 | — |
| CVE-2026-48142US | — | — |
| CVE-2024-39792US | high7.5 | — |
| CVE-2026-11311US | medium6.5 | — |
| CVE-2026-60005US | high8.2 | — |
| CVE-2026-60065US | medium5.3 | — |
| CVE-2026-56434US | — | — |
| CVE-2026-95101US | medium5.3 | — |
| CVE-2024-7347US | medium4.7 | — |
| CVE-2022-41743US | high7.0 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
03
sources (2)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)20 CVEs
- NLNCSC-NL (CSAF)1 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan