Vendor

F5

BIG-IP BIG-IP and BIG-IQ Centralized Management BIG-IQ NGINX Gateway Fabric NGINX Open Source NGINX Plus

Tracked CVEs

CVE-2021-22986KEV CVE-2022-1388KEV CVE-2025-53521KEV CVE-2026-42530 CVE-2026-42533 CVE-2026-42055 CVE-2026-11311 CVE-2026-50107 CVE-2024-24989 CVE-2026-42945 CVE-2026-41225 CVE-2026-41957

Coverage timeline

Attackers Exploited Fortinet and F5 Flaws to Target Thai ISP 3BB
www.securityweek.com · Sep 15, 2026
Fileless PoisonedRefresh Rootkit Targets F5 BIG-IP APM Systems
securityaffairs.com · Sep 9, 2026
F5 BIG-IP Flaw Hid In-Memory Web Shells from Disk Scans
thehackernews.com · Sep 9, 2026
Stealth Linux Rootkit Targets F5 BIG-IP Appliances via RCE
securityonline.info · Sep 7, 2026
CVE-2026-42530: NGINX HTTP/3 flaw allows remote code execution
securityonline.info · Jul 30, 2026
NGINX Heap Overflow Flaw (CVE-2026-42533) Patches Released
securityonline.info · Jul 28, 2026
Critical NGINX Flaw CVE-2026-42533 Allows Remote Code Execution
securityaffairs.com · Jul 20, 2026
F5 patches NGINX heap overflow bug CVE-2026-42533 in eight fixes
www.securityweek.com · Jul 16, 2026
F5 patches NGINX memory flaw enabling remote code execution
securityonline.info · Jul 16, 2026
F5 releases patches for critical NGINX HTTP/3 and HTTP/2 flaws
socradar.io · Jun 19, 2026
F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)
securityonline.info · Jun 19, 2026
F5 Patches Critical NGINX Vulnerabilities Enabling Unauthenticated Code Execution
securityaffairs.com · Jun 18, 2026
F5 patches NGINX remote code flaws CVE-2026-42530, CVE-2026-42055
www.securityweek.com · Jun 18, 2026
Critical NGINX heap overflow flaw lets attackers hijack servers
securityonline.info · May 25, 2026
Hackers Exploit NGINX Zero Day CVE-2026-42945 in Wild
www.securityweek.com · May 18, 2026
NGINX Rift flaw CVE-2026-42945 exploited despite ASLR mitigations
securityaffairs.com · May 18, 2026
CVE-2026-42945 Exploit Seen In Wild, NGINX Users Urged To Patch
thehackernews.com · May 17, 2026
PoC Code Published for Critical NGINX Vulnerability
www.securityweek.com · May 16, 2026
NGINX Rift flaw lets attackers run code with one HTTP request
securityaffairs.com · May 14, 2026
CVE-2026-42945: NGINX Rewrite Bug Allows Remote Code Execution
socradar.io · May 14, 2026
F5 fixes NGINX heap overflow and iControl REST command injection
www.securityweek.com · May 14, 2026
NGINX Rift Bug Lets Attackers Run Code Remotely via Malicious URI
thehackernews.com · May 14, 2026
F5 BIGIP APM Servers Exposed as CVE-2025-53521 Actively Exploited
securityaffairs.com · Apr 6, 2026
CVE-2025-53521: F5 BIG-IP APM Flaw Reclassified as Unauthenticated RCE
socradar.io · Apr 1, 2026
NCSC Urges Immediate Patching of F5 BIG-IP Bug
www.infosecurity-magazine.com · Mar 31, 2026
Fortinet BIG-IP Vulnerability Reclassified as RCE, Under Exploitation
www.darkreading.com · Mar 30, 2026
Vulnerability affecting F5 BIG-IP APM
www.ncsc.gov.uk · Mar 30, 2026
F5 BIG-IP DoS Flaw Upgraded to Critical RCE, Now Exploited in the Wild
www.securityweek.com · Mar 30, 2026
U.S. CISA adds a flaw in F5 BIG-IP AMP to its Known Exploited Vulnerabilities catalog
securityaffairs.com · Mar 28, 2026
CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation
thehackernews.com · Mar 28, 2026