F5 NGINX Plus R36
Approved changes feed: RSS · Atom
cpe:2.3:a:f5:nginx_plus:r36:-:*:*:*:*:*:*
part: a version: r36 update: -
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Nginx Plus (415b3b3a-e094-54fa-82a8-4e72ab41c2b2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/fluxcd/flux2 |
purl2cpe | 2026-06-01 10:11:25.645980 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27651 |
vulnerable | 2026-06-08 07:53:22.790727 |
NGINX ngx_mail_auth_http_module vulnerability
HIGH (7.5)
When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate. This issue may occur when (1) CRAM-MD5 or APOP authentication is enabled, and (2) the authentication server permits retry by returning the Auth-Wait response header. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2026-03-24T14:13:27.295Z
Updated: 2026-07-15T01:13:39.490Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1642 |
vulnerable | 2026-06-08 07:49:09.110203 |
NGINX vulnerability
MEDIUM (5.9)
A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response from an upstream proxied server. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2026-02-04T15:02:06.154Z
Updated: 2026-02-05T05:25:39.303Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.