Vulnerabilities of F5 NGINX Open Source
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-1642 | A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS)… | 5.9 Medium | Feb 4, 2026 |
| CVE-2025-53859 | NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated… | 3.7 Low | Aug 13, 2025 |
| CVE-2025-23419 | When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption… | 4.3 Medium | Feb 5, 2025 |
| CVE-2024-7347 | NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to… | 4.7 Medium | Aug 14, 2024 |
| CVE-2024-35200 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX… | 5.3 Medium | May 29, 2024 |
| CVE-2024-34161 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a… | 5.3 Medium | May 29, 2024 |
| CVE-2024-32760 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can… | 6.5 Medium | May 29, 2024 |
| CVE-2024-31079 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX… | 4.8 Medium | May 29, 2024 |
| CVE-2024-24990 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker… | 7.5 High | Feb 14, 2024 |
| CVE-2024-24989 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker… | 7.5 High | Feb 14, 2024 |
Other F5 products
BIG-IP 259
NGINX Plus 37
BIG-IP Next CNF 26
BIG-IP Next SPK 23
BIG-IQ 20
BIG-IP Next for Kubernetes 13
F5OS - Appliance 12
BIG-IP APM 12
BIG-IP Edge Client 11
F5OS - Chassis 10
BIG-IP Next Central Manager 9
BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) 8