Known Vulnerabilities for Nginx Plus by F5
Listed below are 1 of the newest known vulnerabilities associated with "Nginx Plus" by "F5".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-44015 json | Nginx UI is a web user interface for the Nginx web server. In 2.3.4 and earlier, an authenticated user can perform Server-Sid... | Not Provided | 2026-05-12 | 2026-05-12 |
| CVE-2026-42946 json | A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory al... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-42945 json | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when ... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-42934 json | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charset, an... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-42926 json | When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_bod... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-42268 json | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 to ... | Not Provided | 2026-05-12 | 2026-05-12 |
| CVE-2026-42238 json | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, nginx-ui exposes a backup restore endpoint... | Not Provided | 2026-05-04 | 2026-05-05 |
| CVE-2026-42223 json | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler (api/settings/... | Not Provided | 2026-05-04 | 2026-05-05 |
| CVE-2026-42222 json | Nginx UI is a web user interface for the Nginx web server. In version 2.3.5, an unauthenticated bootstrap takeover exists in ... | Not Provided | 2026-05-04 | 2026-05-06 |
| CVE-2026-42221 json | Nginx UI is a web user interface for the Nginx web server. From version 2.0.0 to before version 2.3.8, an unauthenticated net... | Not Provided | 2026-05-04 | 2026-05-05 |