Home / CVEs we hold for F5 CVEs we hold for F5 Records whose assigning authority named F5 as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-9256 NGINX ngx_http_rewrite_module vulnerability F5 NGINX Open Source CVE-2026-90439 NGINX ngx_http_v3_module vulnerability F5 NGINX Open Source CVE-2026-78689 NGINX ngx_http_js_module vulnerablility F5 NGINX JavaScript CVE-2026-78222 NGINX ngx_http_js_module vulnerability F5 NGINX JavaScript CVE-2026-77180 NGINX Ingress Controller vulnerability F5 NGINX Ingress Controller CVE-2026-66842 BIG-IP and BIG-IQ Configuration utility vulnerability F5 BIG-IQ CVE-2026-60065 NGINX Plus ngx_stream_mqtt_filter_module vulnerability F5 NGINX Plus CVE-2026-60005 NGINX ngx_http_slice_module vulnerability F5 NGINX Open Source CVE-2026-56434 NGINX ngx_http_ssi_module vulnerability F5 NGINX Open Source CVE-2026-55723 NGINX Ingress Controller vulnerability F5 NGINX Ingress Controller CVE-2026-52865 NGINX Ingress Controller vulnerability F5 NGINX Ingress Controller CVE-2026-50107 NGINX Gateway Fabric vulnerability F5 NGINX Gateway Fabric CVE-2026-48142 NGINX ngx_http_charset_module vulnerability F5 NGINX Plus CVE-2026-42946 NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability F5 NGINX Open Source CVE-2026-42945 NGINX ngx_http_rewrite_module vulnerability F5 NGINX Open Source CVE-2026-42934 NGINX ngx_http_charset_module vulnerability F5 NGINX Open Source CVE-2026-42926 NGINX ngx_http_proxy_v2_module vulnerability F5 NGINX Open Source CVE-2026-42780 BIG-IP SSL Orchestrator vulnerability F5 SSL Orchestrator CVE-2026-42533 NGINX Map directive and Regex matching vulnerability F5 NGINX Open Source CVE-2026-42530 NGINX Open-Source ngx_http_v3_module vulnerability F5 NGINX Open Source CVE-2026-42409 BIG-IP HTTP/2 vulnerability F5 BIG-IP Next for Kubernetes CVE-2026-42406 BIG-IP and BIG-IQ privilege escalation vulnerability F5 BIG-IQ CVE-2026-42055 NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability F5 NGINX Plus CVE-2026-41957 BIG-IP and BIG-IQ Configuration utility vulnerability F5 BIG-IQ CVE-2026-41227 BIG-IP HTTP/2 Layer 7 Dos Protection vulnerability F5 BIG-IP CVE-2026-40703 BIG-IP Configuration utility CSRF vulnerability F5 BIG-IP CVE-2026-40701 NGINX ngx_http_ssl_module vulnerability F5 NGINX Open Source CVE-2026-40629 BIG-IP SSL/TLS vulnerability F5 BIG-IP Next for Kubernetes CVE-2026-40618 BIG-IP SSL/TLS vulnerability F5 BIG-IP Next for Kubernetes CVE-2026-34176 Knowledge Appliance mode iControl REST vulnerability F5 BIG-IP CVE-2026-32682 NGINX Gateway Fabric vulnerability F5 NGINX Gateway Fabric CVE-2026-32643 BIG-IP and BIG-IQ privilege escalation vulnerability F5 BIG-IQ CVE-2026-27784 NGINX ngx_http_mp4_module vulnerability F5 NGINX Open Source CVE-2026-27651 NGINX ngx_mail_auth_http_module vulnerability F5 NGINX Plus CVE-2026-22549 BIG-IP Container Ingress Services vulnerability F5 BIG-IP Container Ingress Services CVE-2026-20730 BIG-IP Edge Client for Windows vulnerability F5 BIG-IP Edge Client CVE-2026-18329 NGINX ngx_http_js_module vulnerability F5 NGINX JavaScript CVE-2026-11311 NGINX Gateway Fabric vulnerability F5 NGINX Gateway Fabric CVE-2025-61974 BIG-IP SSL/TLS vulnerability F5 BIG-IP Next for Kubernetes CVE-2025-61938 BIG-IP Advanced WAF and ASM bd process vulnerability F5 BIG-IP CVE-2025-61933 BIG-IP APM cross-site scripting (XSS) vulnerability F5 BIG-IP CVE-2025-60013 F5OS-A FIPS HSM password vulnerability F5 F5OS - Appliance CVE-2025-59778 VELOS partition container network vulnerability F5 F5OS - Chassis CVE-2025-59483 BIG-IP Configuration utility and tmsh vulnerability F5 BIG-IP CVE-2025-59478 BIG-IP AFM DoS protection profile vulnerability F5 BIG-IP CVE-2025-58474 BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability F5 NGINX App Protect WAF CVE-2025-58120 BIG-IP Next (CNF, SPK, and Kubernetes) vulnerability F5 BIG-IP Next for Kubernetes CVE-2025-55670 BIG-IP Next (CNF, SPK, and Kubernetes) vulnerability F5 BIG-IP Next for Kubernetes CVE-2025-53859 NGINX ngx_mail_smtp_module vulnerability F5 NGINX Open Source CVE-2025-48500 BIG-IP APM VPN web client for macOS vulnerability F5 BIG-IP CVE-2025-41430 BIG-IP SSL Orchestrator vulnerability F5 SSL Orchestrator CVE-2025-36525 BIG-IP APM PingAccess Virtual Server Vulnerability F5 BIG-IP CVE-2025-31644 Appliance mode BIG-IP iControl REST and tmsh vulnerability F5 BIG-IP CVE-2025-24319 BIG-IP Next Central Manager vulnerability F5 BIG-IP Next Central Manager CVE-2025-23413 BIG-IP Next Central Manager vulnerability F5 BIG-IP Next Central Manager CVE-2025-14727 NGINX Ingress Controller vulnerability F5 NGINX Ingress Controller CVE-2024-41719 BIG-IP Next Central Manager vulnerability F5 BIG-IP Next Central Manager CVE-2024-39809 BIG-IP Next Central Manager vulnerability F5 BIG-IP Next Central Manager CVE-2024-37028 BIG-IP Next Central Manager vulnerability F5 BIG-IP Next Central Manager CVE-2024-33612 BIG-IP Next Central Manager vulnerability F5 BIG-IP Next Central Manager CVE-2024-32761 BIG-IP TMM tenants on VELOS and rSeries vulnerability F5 BIG-IP CVE-2024-32049 BIG-IP Next Central Manager vulnerability F5 BIG-IP Next Central Manager CVE-2024-28883 BIG-IP APM browser network access VPN client vulnerability F5 BIG-IP CVE-2024-26026 BIG-IP Central Manager SQL Injection F5 BIG-IP Next Central Manager 200 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.