NGINX Plus
F5- Product type
- Other
- Catalog vulnerabilities
- 31
Severity across 31 analyzed records
en
Verify to analyze this security profile
As of 09/13/2026, within CyStack's analyzed data, NGINX Plus has 6 security vulnerabilities published in the last 90 days. Of these, 4 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of NGINX Plus and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-60005NGINX ngx_http_slice_module vulnerability | Exploitation statusNot known exploited | FixYes | Published07/15/2026 | SeverityHigh |
CVE-2026-60065NGINX Plus ngx_stream_mqtt_filter_module vulnerability | Exploitation statusNot known exploited | FixYes | Published07/15/2026 | SeverityMedium |
CVE-2026-56434NGINX ngx_http_ssi_module vulnerability | Exploitation statusNot known exploited | FixYes | Published07/15/2026 | SeverityHigh |
CVE-2026-42533NGINX Map directive and Regex matching vulnerability | Exploitation statusPublic exploit | FixYes | Published07/15/2026 | SeverityCritical |
CVE-2026-48142NGINX ngx_http_charset_module vulnerability | Exploitation statusNot known exploited | FixYes | Published06/17/2026 | SeverityMedium |
CVE-2026-42055NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability | Exploitation statusNot known exploited | FixYes | Published06/17/2026 | SeverityCritical |
CVE-2026-9256NGINX ngx_http_rewrite_module vulnerability | Exploitation statusNot known exploited | FixYes | Published05/22/2026 | SeverityCritical |
CVE-2026-40460NGINX ngx_quic_module vulnerability | Exploitation statusNot known exploited | FixYes | Published05/13/2026 | SeverityMedium |
CVE-2026-42946NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability | Exploitation statusNot known exploited | FixYes | Published05/13/2026 | SeverityHigh |
CVE-2026-42934NGINX ngx_http_charset_module vulnerability | Exploitation statusNot known exploited | FixYes | Published05/13/2026 | SeverityMedium |
CVE-2026-42945NGINX ngx_http_rewrite_module vulnerability | Exploitation statusNot known exploited | FixYes | Published05/13/2026 | SeverityCritical |
CVE-2026-40701NGINX ngx_http_ssl_module vulnerability | Exploitation statusNot known exploited | FixYes | Published05/13/2026 | SeverityMedium |
CVE-2026-27651NGINX ngx_mail_auth_http_module vulnerability | Exploitation statusNot known exploited | FixYes | Published03/24/2026 | SeverityHigh |
CVE-2026-27654NGINX ngx_http_dav_module vulnerability | Exploitation statusNot known exploited | FixYes | Published03/24/2026 | SeverityHigh |
CVE-2026-28755NGINX ngx_stream_ssl_module vulnerability | Exploitation statusNot known exploited | FixYes | Published03/24/2026 | SeverityMedium |
CVE-2026-28753NGINX ngx_mail_proxy_module vulnerability | Exploitation statusNot known exploited | FixYes | Published03/24/2026 | SeverityMedium |
CVE-2026-32647NGINX ngx_http_mp4_module vulnerability | Exploitation statusNot known exploited | FixYes | Published03/24/2026 | SeverityHigh |
CVE-2026-1642NGINX vulnerability | Exploitation statusNot known exploited | FixYes | Published02/04/2026 | SeverityHigh |
CVE-2025-53859NGINX ngx_mail_smtp_module vulnerability | Exploitation statusNot known exploited | FixYes | Published08/13/2025 | SeverityMedium |
CVE-2025-23419TLS Session Resumption Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/05/2025 | SeverityMedium |
CVE-2024-7347NGINX MP4 module vulnerability | Exploitation statusNot known exploited | FixYes | Published08/14/2024 | SeverityMedium |
CVE-2024-39792NGINX Plus MQTT vulnerability | Exploitation statusNot known exploited | FixYes | Published08/14/2024 | SeverityHigh |
CVE-2024-34161NGINX HTTP/3 QUIC vulnerability | Exploitation statusNot known exploited | FixYes | Published05/29/2024 | SeverityMedium |
CVE-2024-35200NGINX HTTP/3 QUIC vulnerability | Exploitation statusNot known exploited | FixYes | Published05/29/2024 | SeverityMedium |
CVE-2024-32760NGINX HTTP/3 QUIC vulnerability | Exploitation statusNot known exploited | FixYes | Published05/29/2024 | SeverityMedium |
CVE-2024-31079NGINX HTTP/3 QUIC vulnerability | Exploitation statusNot known exploited | FixYes | Published05/29/2024 | SeverityMedium |
CVE-2024-24990NGINX HTTP/3 QUIC vulnerability | Exploitation statusNot known exploited | FixYes | Published02/14/2024 | SeverityHigh |
CVE-2024-24989NGINX HTTP/3 QUIC vulnerability | Exploitation statusNot known exploited | FixYes | Published02/14/2024 | SeverityHigh |
CVE-2022-41743NGINX ngx_http_hls_module vulnerability CVE-2022-41743 | Exploitation statusNot known exploited | FixYes | Published10/19/2022 | SeverityHigh |
CVE-2022-41742NGINX ngx_http_mp4_module vulnerability CVE-2022-41742 | Exploitation statusNot known exploited | FixYes | Published10/19/2022 | SeverityHigh |
CVE-2022-41741NGINX ngx_http_mp4_module vulnerability CVE-2022-41741 | Exploitation statusNot known exploited | FixYes | Published10/19/2022 | SeverityHigh |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan