6.5
Moyenne
CVE-2026-32682 When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with permission to create or…
Description
When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with permission to create or modify GRPCRoute resources can cause the NGINX Gateway Fabric control plane to terminate by sending undisclosed GRPCRoute configurations containing backendRef filters. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| NGINX Gateway Fabric 1.3 | 1.3.0 → < 2.6.4 | 2.6.4 |
Références
- my.f5.com my.f5.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de NGINX Gateway Fabric
Les 6 CVE de NGINX Gateway Fabric →
CVE-2026-96615
Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition…
6.5
Moyenne
CVE-2026-91184
Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field…
8.8
Élevée
CVE-2026-66362
Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists…
8.1
Élevée
CVE-2026-50107
When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an injection…
8.1
Élevée