F5 Nginx Instance Manager vulnerabilities

19 CVEs affecting F5 Nginx Instance Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-60005, published 2026-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-42055, published 2026-06-17. High severity, CVSS 8.1. EPSS: 6.5% chance of exploitation in the next 30 days. NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or…
CVE-2026-42945, published 2026-05-13. High severity, CVSS 8.1. EPSS: 3.4% chance of exploitation in the next 30 days. NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an…
CVE-2026-9256, published 2026-05-22. High severity, CVSS 8.1. EPSS: 2.7% chance of exploitation in the next 30 days. NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping…
CVE-2026-42530, published 2026-06-17. High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days. NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions…
CVE-2026-42946, published 2026-05-13. High severity, CVSS 7.4. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data. When scgi_pass or uwsgi_pass is…
CVE-2022-35241, published 2022-08-04. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can cause an increase in disk resource utilization. Note: Software versions which…
CVE-2026-42934, published 2026-05-13. Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days. NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charset, and charset_map and proxy_pass with disabled buffering ("off") directives…
CVE-2026-40701, published 2026-05-13. Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days. NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directive is set to "on" or…
CVE-2026-60005, published 2026-07-15. High severity, CVSS 8.2. EPSS: 0.5% chance of exploitation in the next 30 days. NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update…
CVE-2023-28656, published 2023-05-03. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment. Note: Software versions which have reached End of…

Latest

CVE-2026-60062, published 2026-07-15. Medium severity, CVSS 6.4. EPSS: 0.3% chance of exploitation in the next 30 days. The NGINX Agent config_dirs directive allows a low-privileged attacker to gain limited read and write access to files outside of the designated secure directory. The config_dirs directive required…
CVE-2026-48142, published 2026-06-17. Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days. NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a…
CVE-2026-42926, published 2026-05-13. Medium severity, CVSS 5.8. EPSS: 0.3% chance of exploitation in the next 30 days. When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the…