Login Request a demo
NG
Product
NGINX Gateway Fabric
by F5 · last CVE Oct 14, 2026
21
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Vulnerabilities21In the news9Timeline
Severity mix
Critical 0High 10Medium 11Low 0
Severity
All severities21Critical0High10Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add NGINX Gateway Fabric to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-91184
8.8
0%
Oct 14
NGINX Gateway Fabric vulnerability
Affected: 2.4.0 before 2.8.0
CVE-2026-60005
8.2
1%
Jul 15
NGINX ngx_http_slice_module vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 before 2.6.7
CVE-2026-66362
8.1
1%
Sep 2
NGF vulnerability
Affected: 2.5.0 before 2.6.8
CVE-2026-42533
8.1
1%
Jul 15
NGINX Map directive and Regex matching vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 before 2.6.7
CVE-2026-50107
8.1
0%
Jun 17
NGINX Gateway Fabric vulnerability
Affected: 2.3.0 before 2.6.4
CVE-2026-42055
8.1
7%
Jun 17
NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 through 2.6.3
CVE-2026-42530
8.1
6%
Jun 17
NGINX Open-Source ngx_http_v3_module vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 before 2.6.4
CVE-2026-9256
8.1
11%
May 22
NGINX ngx_http_rewrite_module vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 before 2.6.2
CVE-2026-42945
8.1
68%
May 13
NGINX ngx_http_rewrite_module vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 through 2.5.1
CVE-2026-42946
7.4
1%
May 13
NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 through 2.6.0
CVE-2026-96615
6.5
0%
Oct 14
NGINX Gateway Fabric vulnerability
Affected: 2.0.0 before 2.8.0
CVE-2026-56434
6.5
0%
Jul 15
NGINX ngx_http_ssi_module vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 before 2.6.7
CVE-2026-32682
6.5
0%
Jun 17
NGINX Gateway Fabric vulnerability
Affected: 1.3.0 before 2.6.4
CVE-2026-11311
6.5
1%
Jun 17
NGINX Gateway Fabric vulnerability
Affected: 2.5.0 before 2.6.4
CVE-2026-40460
6.5
0%
May 13
NGINX ngx_quic_module vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 through 2.6.0
CVE-2026-1642
5.9
0%
Feb 4
A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers
Affected: 1.2.0 through 1.6.2; 2.0.0 before 2.4.1
CVE-2026-42926
5.8
0%
May 13
NGINX ngx_http_proxy_v2_module vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 through 2.6.0
CVE-2026-60065
5.3
0%
Jul 15
NGINX Plus ngx_stream_mqtt_filter_module vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 before 2.6.7
CVE-2026-48142
4.8
1%
Jun 17
NGINX ngx_http_charset_module vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 through 2.6.3
CVE-2026-42934
4.8
1%
May 13
NGINX ngx_http_charset_module vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 through 2.6.0
CVE-2026-40701
4.8
1%
May 13
NGINX ngx_http_ssl_module vulnerability
Affected: 1.3.0 through 1.6.2; 2.0.0 through 2.6.0
Showing 21