en
F5 is a multinational application delivery and cybersecurity company. It develops products and services that help organizations deliver, secure, scale, and manage applications and APIs across data centers, cloud environments, edge locations, and Kubernetes platforms. Its portfolio includes the BIG-IP and NGINX product families and related management and security services.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/22/2026, F5 recorded 20 security vulnerabilities in the last 90 days across 7 products, including 16 rated High or above and 1 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, NGINX Open Source had the most security vulnerabilities in the F5 ecosystem, with 6 vulnerabilities—approximately 30% of the provider's total vulnerabilities during this period.
CVE-2026-104939NGINX Ingress Controller vulnerabilityCVE-2026-101019NGINX ngx_http_js_module vulnerabilityCVE-2026-101025NGINX ngx_http_js_module vulnerabilityCVE-2026-95101NGINX ngx_http_v3_module vulnerabilityCVE-2026-94197NGINX Ingress Controller vulnerability| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-104939NGINX Ingress Controller vulnerability | Exploitation statusNot exploited | FixYes | Affected productNGINX Ingress Controller | Published10/14/2026 | SeverityHigh |
CVE-2026-101019NGINX ngx_http_js_module vulnerability | Exploitation statusNot exploited | FixYes | Affected productNGINX JavaScript | Published10/14/2026 | |
CVE-2026-101025NGINX ngx_http_js_module vulnerability | Exploitation statusNot exploited | FixYes | Affected productNGINX JavaScript | Published10/14/2026 | |
CVE-2026-95101NGINX ngx_http_v3_module vulnerability | Exploitation statusNot exploited | FixYes | Affected productNGINX Plus | Published10/14/2026 | |
CVE-2026-94197NGINX Ingress Controller vulnerability | Exploitation statusNot exploited | FixYes | Affected productNGINX Ingress Controller | Published10/14/2026 | |
CVE-2026-96615NGINX Gateway Fabric vulnerability | Exploitation statusNot exploited | FixYes | Affected productNGINX Gateway Fabric | Published10/14/2026 | |
CVE-2026-91184NGINX Gateway Fabric vulnerability | Exploitation statusNot exploited | FixYes | Affected productNGINX Gateway Fabric | Published10/14/2026 | |
CVE-2026-97205NGINX ngx_http_core_module vulnerability | Exploitation statusNot exploited | FixYes | Affected productNGINX Plus | Published10/14/2026 | |
CVE-2026-93479NGINX map directive and regex matching vulnerability | Exploitation statusNot exploited | FixYes | Affected productNGINX Plus | Published10/14/2026 | |
CVE-2026-97629NGINX ngx_http_ssl_module vulnerability | Exploitation statusNot exploited | FixYes | Affected productNGINX Plus | Published10/14/2026 |
1,049 Results | Page 1 of 105
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityCritical |