CVE-2021-23019: F5 Nginx Controller

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package.

Affected products

• F5 Nginx Controller: from 2.0.0, up to and including 2.9.0; from 3.0.0, before 3.15.0 (fixed in 3.15.0)

Published 2021-06-01. Last modified 2026-06-17.