Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: F5 NGINX Gateway Fabric 2.6.4 Clear all filters
TI-2026-25174 CVE-2026-32682 · GHSA-vh3x-jr27-wpwh

NGINX Gateway Fabric vulnerability

Priority LOW 31

When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with permission to create or modify GRPCRoute resources can cause the NGINX Gateway Fabric control plane to terminate by sending…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00292 Published 2026-06-17 Fixed in 2.6.4 CWE-129
TI-2026-36891 CVE-2026-50107 · GHSA-gx48-gh32-62q5

NGINX Gateway Fabric vulnerability

Priority MEDIUM 40

When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00492 Published 2026-06-17 Fixed in 2.6.4 CWE-74
TI-2026-09769 CVE-2026-11311 · GHSA-9566-3h6w-56pp

NGINX Gateway Fabric vulnerability

Priority MEDIUM 40

When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00567 Published 2026-06-17 Fixed in 2.6.4 CWE-76