F5 vulnerabilities

CVEs per yearBy the year they were published

1. 201959
2. 20205
3. 202284
4. 202354
5. 202450
6. 202581
7. 202699

Known exploitedNewest addition to KEV first

• CVE-2026-94127

  BIG-IP APM OAuth vulnerability

  F5 · BIG-IP

  ExploitedCritical9.3
• CVE-2025-53521

  BigIP APM Vulnerability

  F5 · BIG-IP

  ExploitedCritical9.3
• CVE-2023-46748

  BIG-IP Configuration utility authenticated SQL injection vulnerability

  F5 · BIG-IP

  ExploitedHigh8.8
• CVE-2023-46747

  BIG-IP Configuration utility unauthenticated remote code execution vulnerability

  F5 · BIG-IP

  ExploitedCritical9.8
• CVE-2022-1388

  On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all…

  F5 · BIG-IP

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-104939

  NGINX Ingress Controller vulnerability

  F5 · NGINX Ingress Controller

  High8.7
• CVE-2026-101019

  NGINX ngx_http_js_module vulnerability

  F5 · NGINX JavaScript

  High8.3
• CVE-2026-101025

  NGINX ngx_http_js_module vulnerability

  F5 · NGINX JavaScript

  Medium6.9
• CVE-2026-95101

  NGINX ngx_http_v3_module vulnerability

  F5 · NGINX Plus

  Medium6.9
• CVE-2026-94197

  NGINX Ingress Controller vulnerability

  F5 · NGINX Ingress Controller

  High8.7
• CVE-2026-96615

  NGINX Gateway Fabric vulnerability

  F5 · NGINX Gateway Fabric

  High7.1
• CVE-2026-91184

  NGINX Gateway Fabric vulnerability

  F5 · NGINX Gateway Fabric

  High8.7
• CVE-2026-97205

  NGINX ngx_http_core_module vulnerability

  F5 · NGINX Plus

  Critical9.2
• CVE-2026-93479

  NGINX map directive and regex matching vulnerability

  F5 · NGINX Plus

  Critical9.2
• CVE-2026-97629

  NGINX ngx_http_ssl_module vulnerability

  F5 · NGINX Plus

  High8.3