CVE Tools
Track your stack

NGINX Plus

38 CVEs tracked. 1 of them are in CISA KEV.

This hub aggregates every CVE we track for NGINX Plus, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

NGINX Plus CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
NGINX Plus CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-021
2025-030
2025-040
2025-050
2025-060
2025-070
2025-081
2025-090
2025-100
2025-110
2025-120
2026-010
2026-021
2026-035
2026-040
2026-056
2026-062
2026-074
2026-080
2026-091
2026-105

Severity

How the 38 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • High1847%
  • Medium1745%
  • Low38%

Latest CVEs

The 15 most recently published vulnerabilities affecting NGINX Plus.

  1. CVE-2026-95101NGINX ngx_http_v3_module vulnerability5.3
  2. CVE-2026-97205NGINX ngx_http_core_module vulnerability8.1
  3. CVE-2026-93479NGINX map directive and regex matching vulnerability8.1
  4. CVE-2026-97629NGINX ngx_http_ssl_module vulnerability6.5
  5. CVE-2026-15176NGINX ngx_http_core_module vulnerability8.1
  6. CVE-2026-90439NGINX ngx_http_v3_module vulnerability6.5
  7. CVE-2026-60005NGINX ngx_http_slice_module vulnerability8.2
  8. CVE-2026-60065NGINX Plus ngx_stream_mqtt_filter_module vulnerability3.7
  9. CVE-2026-56434NGINX ngx_http_ssi_module vulnerability6.5
  10. CVE-2026-42533NGINX Map directive and Regex matching vulnerability8.1
  11. CVE-2026-48142NGINX ngx_http_charset_module vulnerability4.8
  12. CVE-2026-42055NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability8.1
  13. CVE-2026-9256NGINX ngx_http_rewrite_module vulnerability8.1
  14. CVE-2026-40460NGINX ngx_quic_module vulnerability6.5
  15. CVE-2026-42946NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability6.5

Product grouping is registry-driven, with AI assist and human review. How it works