Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: F5 Component: Dos Clear all filters
TI-2026-35579 CVE-2026-48142 · GHSA-2388-jp8v-fg9w

NGINX ngx_http_charset_module vulnerability

Priority LOW 29

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00684 Published 2026-06-17 Partial fix · 1.31.2, 1.30.3 +2 CWE-125
TI-2026-08132 CVE-2026-9256 · GHSA-h78r-86c6-jgp4

NGINX ngx_http_rewrite_module vulnerability

Priority MEDIUM 55

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.10856 Published 2026-05-22 Partial fix · 37.0.1.1, R36 P5 +3 CWE-122
TI-2026-29212 CVE-2026-40460 · GHSA-h7rq-f9gq-mc8r

NGINX ngx_quic_module vulnerability

Priority LOW 37

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00373 Published 2026-05-13 Partial fix · R37, R36 P4 +3 CWE-290
TI-2026-31137 CVE-2026-42946 · GHSA-fm65-xrrr-c358

NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability

Priority LOW 38

A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00932 Published 2026-05-13 Partial fix · R37, R36 P4 +3 CWE-789
TI-2026-31131 CVE-2026-42934 · GHSA-6vmc-2wh4-77qp

NGINX ngx_http_charset_module vulnerability

Priority LOW 29

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00731 Published 2026-05-13 Partial fix · R37, R36 P4 +3 CWE-125
TI-2026-31136 CVE-2026-42945 · GHSA-gcgv-v5gf-c543

NGINX ngx_http_rewrite_module vulnerability

Priority HIGH 78

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.68047 Published 2026-05-13 Fixed in R37, R36 P4 +3 CWE-122
TI-2026-29378 CVE-2026-40701 · GHSA-x88q-x2r7-vg3g

NGINX ngx_http_ssl_module vulnerability

Priority LOW 29

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directive is set to "on" or the leaf parameters…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0069 Published 2026-05-13 Partial fix · R37, R36 P4 +3 CWE-416