Product by Nginx
Nginx Plus
24 known vulnerabilities in Nginx Plus (Nginx), 0 of them actively exploited (CISA KEV).
Key figures
24
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-9256 | NGINX ngx_http_rewrite_module vulnerability | 8.1 | |
| Critical | CVE-2026-42945 | NGINX ngx_http_rewrite_module vulnerability | 8.1 | |
| Critical | CVE-2026-42055 | NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability | 8.1 | |
| Critical | CVE-2026-93479 | NGINX map directive and regex matching vulnerability | 8.1 | |
| Medium | CVE-2025-23419 | TLS Session Resumption Vulnerability | 4.3 | |
| Critical | CVE-2026-15176 | NGINX ngx_http_core_module vulnerability | 8.1 | |
| Critical | CVE-2026-97205 | NGINX ngx_http_core_module vulnerability | 8.1 | |
| Critical | CVE-2026-42533 | NGINX Map directive and Regex matching vulnerability | 8.1 | |
| High | CVE-2026-42946 | NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability | 7.4 | |
| High | CVE-2026-60005 | NGINX ngx_http_slice_module vulnerability | 8.2 | |
| High | CVE-2026-11311 | NGINX Gateway Fabric vulnerability | 6.5 | |
| High | CVE-2026-1642 | NGINX vulnerability | 5.9 | |
| High | CVE-2026-97629 | NGINX ngx_http_ssl_module vulnerability | 6.5 | |
| High | CVE-2026-56434 | NGINX ngx_http_ssi_module vulnerability | 6.5 | |
| Medium | CVE-2026-48142 | NGINX ngx_http_charset_module vulnerability | 4.8 | |
| Medium | CVE-2026-42934 | NGINX ngx_http_charset_module vulnerability | 4.8 | |
| Medium | CVE-2026-40701 | NGINX ngx_http_ssl_module vulnerability | 4.8 | |
| Medium | CVE-2026-95101 | NGINX ngx_http_v3_module vulnerability | 5.3 | |
| High | CVE-2024-39792 | NGINX Plus MQTT vulnerability | 7.5 | |
| Medium | CVE-2026-90439 | NGINX ngx_http_v3_module vulnerability | 6.5 | |
| Medium | CVE-2025-53859 | NGINX ngx_mail_smtp_module vulnerability | 3.7 | |
| Medium | CVE-2026-60065 | NGINX Plus ngx_stream_mqtt_filter_module vulnerability | 5.3 | |
| Medium | CVE-2026-40460 | NGINX ngx_quic_module vulnerability | 6.5 | |
| Medium | CVE-2024-7347 | NGINX MP4 module vulnerability | 4.7 |
News
- F5 rushes out emergency NGINX patches for three critical flawscsoonline,
- 17 old software bugs that took way too long to squashcsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 29sans-atrisk-mail,
- Health-ISAC Warns of Increased Attacks from ShinyHunters Threat Actorssans-newsbites-mail,
- Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Executionthehackernews,