CVE-2022-27495: F5 Nginx Service Mesh

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected products

• F5 Nginx Service Mesh: version 1.3.0 only; version 1.3.1 only

Published 2022-05-05. Last modified 2026-06-17.