Login Request a demo
NI
Product
NGINX Ingress Controller
by F5 · last CVE Oct 14, 2026
On CISA KEVExploited in the wild
28
CVEs
1
On KEV
8.3
Max CVSS
2
New 30D
Vulnerabilities28In the news9Timeline
Severity mix
Critical 0High 16Medium 12Low 0
Severity
All severities28Critical0High16Medium12Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add NGINX Ingress Controller to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-44487
In wildKEV
7.5
100%
Oct 10
HTTP/2 Rapid Reset Attack Vulnerability
Affected: 2.0.0 through 2.4.2; 3.0.0 through 3.3.0
CVE-2026-77180
8.3
0%
Sep 2
NGINX Ingress Controller vulnerability
Affected: 5.0.0 before 5.6.0; 2026-lts-r1 before 2026-lts-r5
CVE-2026-55723
8.3
1%
Jul 15
NGINX Ingress Controller vulnerability
Affected: 5.0.0 before 5.5.2; 2026-lts-r1 before 2026-lts-r3
CVE-2025-14727
8.3
0%
Dec 17
A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-target annotation validation
Affected: 5.3.0
CVE-2026-60005
8.2
1%
Jul 15
NGINX ngx_http_slice_module vulnerability
Affected: 3.5.0 through 3.7.2; 5.0.0 before 5.5.3; 2026-lts-r1 before 2026-lts-r4; 4.0.0; 4.0.1
CVE-2026-42533
8.1
1%
Jul 15
NGINX Map directive and Regex matching vulnerability
Affected: 3.5.0 through 3.7.2; 5.0.0 before 5.5.3; 2026-lts-r1 before 2026-lts-r4; 4.0.0; 4.0.1
CVE-2026-42055
8.1
7%
Jun 17
NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability
Affected: 3.5.0 through 3.7.2; 4.0.0 through 4.0.1; 5.0.0 through 5.5.0
CVE-2026-42530
8.1
6%
Jun 17
NGINX Open-Source ngx_http_v3_module vulnerability
Affected: 3.5.0 through 3.7.2; 5.0.0 before 5.5.1; 4.0.0; 4.0.1
CVE-2026-9256
8.1
11%
May 22
NGINX ngx_http_rewrite_module vulnerability
Affected: 3.5.0 through 3.7.2; 4.0.0 through 4.0.1; 5.0.0 before 5.4.3
CVE-2026-42945
8.1
68%
May 13
NGINX ngx_http_rewrite_module vulnerability
Affected: 3.5.0 through 3.7.2; 4.0.0 through 4.0.1; 5.0.0 through 5.4.1
CVE-2022-41741
7.8
1%
Oct 19
NGINX ngx_http_mp4_module vulnerability CVE-2022-41741
Affected: 1.9.0 through 1.12.4; 2.0.0 through 2.4.0
CVE-2026-104939
7.5
0%
Oct 14
NGINX Ingress Controller vulnerability
Affected: 5.6.0 before 5.7.0
CVE-2026-94197
7.5
0%
Oct 14
NGINX Ingress Controller vulnerability
Affected: 5.5.0 before 5.7.0
CVE-2026-42946
7.4
1%
May 13
NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability
Affected: 3.5.0 through 3.7.2; 4.0.0 through 4.0.1; 5.0.0 through 5.4.2
CVE-2022-41742
7.1
1%
Oct 19
NGINX ngx_http_mp4_module vulnerability CVE-2022-41742
Affected: 1.9.0 through 1.12.4; 2.0.0 through 2.4.0
CVE-2022-41743
7.0
0%
Oct 19
NGINX ngx_http_hls_module vulnerability CVE-2022-41743
Affected: 1.9.0 through 1.12.4; 2.0.0 through 2.4.0
Showing 16