Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-40060 |
|
Vulnerability in f5 (CVE-2026-40060)
vulnerability in f5 (CVE-2026-40060). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40061 |
|
Command Injection in f5 (CVE-2026-40061)
command injection in f5 (CVE-2026-40061). Confidential information can be exposed externally.
|
| CVE-2026-40067 |
|
Vulnerability in f5 (CVE-2026-40067)
vulnerability in f5 (CVE-2026-40067). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40423 |
|
Vulnerability in f5 (CVE-2026-40423)
vulnerability in f5 (CVE-2026-40423). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40435 |
|
Vulnerability in f5 (CVE-2026-40435)
vulnerability in f5 (CVE-2026-40435). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40460 |
|
Vulnerability in nginx (CVE-2026-40460)
vulnerability in nginx (CVE-2026-40460). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.30.1` or later.
|
| CVE-2026-40462 |
|
Vulnerability in f5 (CVE-2026-40462)
vulnerability in f5 (CVE-2026-40462). Confidential information can be exposed externally.
|
| CVE-2026-39455 |
|
Vulnerability in f5 (CVE-2026-39455)
vulnerability in f5 (CVE-2026-39455). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39458 |
|
Vulnerability in f5 (CVE-2026-39458)
vulnerability in f5 (CVE-2026-39458). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39459 |
|
Vulnerability in f5 (CVE-2026-39459)
vulnerability in f5 (CVE-2026-39459). Successful exploitation can lead to full system takeover.
|
| CVE-2026-35062 |
|
Vulnerability in f5 (CVE-2026-35062)
vulnerability in f5 (CVE-2026-35062). Confidential information can be exposed externally.
|
| CVE-2026-32643 |
|
Vulnerability in f5 (CVE-2026-32643)
vulnerability in f5 (CVE-2026-32643). Confidential information can be exposed externally.
|
| CVE-2026-32673 |
|
Vulnerability in f5 (CVE-2026-32673)
vulnerability in f5 (CVE-2026-32673). Confidential information can be exposed externally.
|
| CVE-2026-34019 |
|
Vulnerability in f5 (CVE-2026-34019)
vulnerability in f5 (CVE-2026-34019). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34176 |
|
OS Command Injection in f5 (CVE-2026-34176)
OS command injection in f5 (CVE-2026-34176). Confidential information can be exposed externally.
|
| CVE-2026-28758 |
|
Vulnerability in f5 (CVE-2026-28758)
vulnerability in f5 (CVE-2026-28758). Confidential information can be exposed externally.
|
| CVE-2026-20916 |
|
Path Traversal in f5 (CVE-2026-20916)
path traversal in f5 (CVE-2026-20916). Data can be tampered with by attackers.
|
| CVE-2026-24464 |
|
Vulnerability in path-traversal (CVE-2026-24464)
vulnerability in path-traversal (CVE-2026-24464). Data can be tampered with by attackers.
|
| CVE-2025-53521 KEV |
|
[KEV] Vulnerability in F5 big-ip (CVE-2025-53521)
vulnerability in F5 big-ip (CVE-2025-53521). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-27654 |
|
Vulnerability in nginx (CVE-2026-27654)
vulnerability in nginx (CVE-2026-27654). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
|
| CVE-2026-27784 |
|
Vulnerability in nginx-gateway (CVE-2026-27784)
vulnerability in nginx-gateway (CVE-2026-27784). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
|
| CVE-2026-32647 |
|
Out-of-Bounds Read in nginx-gateway (CVE-2026-32647)
vulnerability in nginx-gateway (CVE-2026-32647). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
|
| CVE-2026-27651 |
|
Vulnerability in nginx-gateway (CVE-2026-27651)
vulnerability in nginx-gateway (CVE-2026-27651). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
|
| CVE-2023-46748 KEV |
|
[KEV] SQL Injection in F5 big-ip-configuration-utility (CVE-2023-46748)
SQL injection in F5 big-ip-configuration-utility (CVE-2023-46748). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-46747 KEV |
|
[KEV] Vulnerability in F5 big-ip-configuration-utility (CVE-2023-46747)
vulnerability in F5 big-ip-configuration-utility (CVE-2023-46747). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-44487 KEV |
|
[KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487)
vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.
|
| CVE-2022-1388 KEV |
|
[KEV] Vulnerability in F5 big-ip (CVE-2022-1388)
vulnerability in F5 big-ip (CVE-2022-1388). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-22991 KEV |
|
[KEV] Buffer Overflow in F5 big-ip-traffic-management-microkernel (CVE-2021-22991)
vulnerability in F5 big-ip-traffic-management-microkernel (CVE-2021-22991). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-40438 KEV |
|
[KEV] SSRF (Server-Side Request Forgery) in Apache resf (CVE-2021-40438)
SSRF in Apache resf (CVE-2021-40438). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2020-5902 KEV |
|
[KEV] Path Traversal in F5 big-ip (CVE-2020-5902)
path traversal in F5 big-ip (CVE-2020-5902). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-22986 KEV |
|
[KEV] Authorization Flaw in F5 big-ip-and-big-iq-centralized-management (CVE-2021-22986)
vulnerability in F5 big-ip-and-big-iq-centralized-management (CVE-2021-22986). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-0301 |
|
Vulnerability in f5 (CVE-2017-0301)
vulnerability in f5 (CVE-2017-0301). Successful exploitation can lead to full system takeover.
|
| CVE-2017-0304 |
|
SQL Injection in sqli (CVE-2017-0304)
SQL injection in sqli (CVE-2017-0304). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6129 |
|
Vulnerability in f5 (CVE-2017-6129)
vulnerability in f5 (CVE-2017-6129). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6132 |
|
Vulnerability in f5 (CVE-2017-6132)
vulnerability in f5 (CVE-2017-6132). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6133 |
|
Vulnerability in dos (CVE-2017-6133)
vulnerability in dos (CVE-2017-6133). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6134 |
|
Vulnerability in f5 (CVE-2017-6134)
vulnerability in f5 (CVE-2017-6134). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6135 |
|
Vulnerability in f5 (CVE-2017-6135)
vulnerability in f5 (CVE-2017-6135). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6136 |
|
Vulnerability in f5 (CVE-2017-6136)
vulnerability in f5 (CVE-2017-6136). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6138 |
|
Vulnerability in f5 (CVE-2017-6138)
vulnerability in f5 (CVE-2017-6138). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6139 |
|
Vulnerability in f5 (CVE-2017-6139)
vulnerability in f5 (CVE-2017-6139). Confidential information can be exposed externally.
|
| CVE-2017-6140 |
|
Vulnerability in f5 (CVE-2017-6140)
vulnerability in f5 (CVE-2017-6140). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6151 |
|
Vulnerability in f5 (CVE-2017-6151)
vulnerability in f5 (CVE-2017-6151). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6164 |
|
Vulnerability in dos (CVE-2017-6164)
vulnerability in dos (CVE-2017-6164). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6167 |
|
Vulnerability in f5 (CVE-2017-6167)
vulnerability in f5 (CVE-2017-6167). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6166 |
|
Vulnerability in f5 (CVE-2017-6166)
vulnerability in f5 (CVE-2017-6166). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6168 |
|
Vulnerability in f5 (CVE-2017-6168)
vulnerability in f5 (CVE-2017-6168). Confidential information can be exposed externally. Mitigation: upgrade to `11.6.2` or later.
|
| CVE-2017-0303 |
|
Vulnerability in f5 (CVE-2017-0303)
vulnerability in f5 (CVE-2017-0303). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6157 |
|
Vulnerability in f5 (CVE-2017-6157)
vulnerability in f5 (CVE-2017-6157). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6159 |
|
Vulnerability in dos (CVE-2017-6159)
vulnerability in dos (CVE-2017-6159). Risk of unauthorized operations or information disclosure.
|