NGINX Plus
- Software type
- Load balancer
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/21/2026, NGINX Plus recorded 6 security vulnerabilities in the last 90 days, of which 4 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of NGINX Plus and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-95101NGINX ngx_http_v3_module vulnerabilityCVE-2026-97205NGINX ngx_http_core_module vulnerabilityCVE-2026-93479NGINX map directive and regex matching vulnerabilityCVE-2026-97629NGINX ngx_http_ssl_module vulnerabilityCVE-2026-15176NGINX ngx_http_core_module vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-95101NGINX ngx_http_v3_module vulnerability | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-97205NGINX ngx_http_core_module vulnerability | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityCritical |
|---|
CVE-2026-93479NGINX map directive and regex matching vulnerability | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityCritical |
|---|
CVE-2026-97629NGINX ngx_http_ssl_module vulnerability | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityHigh |
|---|
CVE-2026-15176NGINX ngx_http_core_module vulnerability | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityCritical |
|---|
CVE-2026-90439NGINX ngx_http_v3_module vulnerability | Exploitation statusNot exploited | FixYes | Published09/15/2026 | SeverityMedium |
|---|
CVE-2026-60005NGINX ngx_http_slice_module vulnerability | Exploitation statusNot exploited | FixYes | Published07/15/2026 | SeverityHigh |
|---|
CVE-2026-60065NGINX Plus ngx_stream_mqtt_filter_module vulnerability | Exploitation statusNot exploited | FixYes | Published07/15/2026 | SeverityMedium |
|---|
CVE-2026-56434NGINX ngx_http_ssi_module vulnerability | Exploitation statusNot exploited | FixYes | Published07/15/2026 | SeverityHigh |
|---|
CVE-2026-42533NGINX Map directive and Regex matching vulnerability | Exploitation statusActively exploited | FixYes | Published07/15/2026 | SeverityCritical |
|---|
37 Results | Page 1 of 4