F5 Waf vulnerabilities

• f5 nginx open source, nginx plus, nginx gateway fabric +3 more +5 more NGINX ngx_http_slice_module vulnerability CVE-2026-60005 Fix available 8.8 HighJuly 15, 2026
• f5 nginx plus, nginx gateway fabric, nginx ingress controller +1 more +3 more NGINX Plus ngx_stream_mqtt_filter_module vulnerability CVE-2026-60065 6.3 MediumJuly 15, 2026
• f5 nginx open source, nginx plus, nginx gateway fabric +2 more +4 more NGINX ngx_http_ssi_module vulnerability CVE-2026-56434 Fix available 8.3 HighJuly 15, 2026
• f5 nginx open source, nginx plus, nginx gateway fabric +2 more +4 more NGINX Map directive and Regex matching vulnerability CVE-2026-42533 Public exploitFix available 9.2 CriticalJuly 15, 2026
• f5 nginx open source, nginx plus, dos +4 more +6 more NGINX ngx_http_charset_module vulnerability CVE-2026-48142 Fix available 6.3 MediumJune 17, 2026
• f5 nginx open source, nginx plus, dos +14 more +16 more NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability CVE-2026-42055 Public exploitFix available 9.2 CriticalJune 17, 2026
• f5 nginx open source, nginx plus, debian linux +15 more +17 more NGINX ngx_http_rewrite_module vulnerability CVE-2026-9256 Public exploitFix available EPSS 10.9% 9.2 CriticalMay 22, 2026
• f5 nginx open source, nginx plus, dos +4 more +6 more NGINX ngx_quic_module vulnerability CVE-2026-40460 Fix available 6.9 MediumMay 13, 2026
• f5 dos, nginx open source, nginx plus +4 more +6 more NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability CVE-2026-42946 Fix available 8.3 HighMay 13, 2026
• f5 nginx open source, nginx plus, dos +4 more +6 more NGINX ngx_http_charset_module vulnerability CVE-2026-42934 Fix available 6.3 MediumMay 13, 2026
• f5 nginx open source, nginx plus, dos +26 more +28 more NGINX ngx_http_rewrite_module vulnerability CVE-2026-42945 Public exploitFix available EPSS 68.0% 9.2 CriticalMay 13, 2026
• f5 nginx open source, nginx plus, dos +4 more +6 more NGINX ngx_http_ssl_module vulnerability CVE-2026-40701 Public exploitFix available 6.3 MediumMay 13, 2026
• f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +1 more +3 more BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability CVE-2025-58474 6.9 MediumOctober 15, 2025
• f5 big-ip advanced waf & asm, big-ip advanced web application firewall, big-ip application security manager +2 more BIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836 CVE-2022-41836 7.5 HighOctober 19, 2022
• f5 big-ip advanced waf & asm, big-ip advanced web application firewall, big-ip application security manager +2 more BIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691 CVE-2022-41691 7.5 HighOctober 19, 2022
• f5 big-ip advanced waf & asm, big-ip advanced web application firewall, big-ip application security manager +2 more BIG-IP Advanced WAF and ASM iControl REST vulnerability CVE-2022-41617 CVE-2022-41617 7.2 HighOctober 19, 2022
• f5 big-ip ltm, advanced waf, asm, and apm, big-ip access policy manager, big-ip advanced web application firewall +2 more +4 more On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions... CVE-2022-29491 7.5 HighMay 5, 2022
• f5 big-ip guided configuration (gc), big-ip guided configuration, big-ip (advanced waf, apm, asm) +3 more +5 more On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF,... CVE-2022-27806 8.7 HighMay 5, 2022
• f5 big-ip guided configuration (gc), big-ip guided configuration, big-ip (advanced waf, apm, asm) +3 more +5 more On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF,... CVE-2022-25946 8.7 HighMay 5, 2022
• f5 big-ip advanced waf, asm, and apm, big-ip access policy manager, big-ip advanced web application firewall +1 more +3 more On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior... CVE-2022-26890 7.5 HighMay 5, 2022
• owasp modsecurity, debian linux, f5 nginx modsecurity waf +2 more +4 more ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects... CVE-2021-42717 Public exploitFix available 7.5 HighDecember 7, 2021