Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: F5 NGINX Gateway Fabric 2.8.0 Clear all filters
TI-2026-74061 CVE-2026-96615 · GHSA-h8jf-9855-344m

Authentication bypass in NGINX Gateway Fabric exposes TLS private keys

Priority LOW 31

Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00256 Published 2026-10-14 Fixed in 2.8.0 CWE-290
TI-2026-74052 CVE-2026-91184 · GHSA-8rxj-rxx8-xj47

Configuration injection in NGINX Gateway Fabric via AuthenticationFilter

Priority MEDIUM 40

Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane ng…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00482 Published 2026-10-14 Fixed in 2.8.0 CWE-76