F5 product
NGINX Plus
No NGINX Plus CVE is in the CISA KEV catalogue.
Tracked since 14 May · latest article 16 Oct · RSS · API
0Open KEV deadlines
None open
0Added to KEV · 90 days
of 0 in the full CISA catalogue · all time
1High exploit odds · current
EPSS top 5%, not in KEV
0Articles · 7 days
none this week
Exploited, by due date
No NGINX Plus CVE is in the CISA KEV catalogue.
Patch cadence and exploit odds
How often CISA adds NGINX Plus CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
CISA has not added a NGINX Plus CVE to KEV.
Fix listed
6 of 6 CVEs in coverage
Every CVE in coverage has a fix recorded.
EPSS percentile of each CVE
One dot per CVE; a red diamond marks those in CISA KEV.
Show as tableHide table
| CVE | EPSS percentile |
|---|---|
| CVE-2026-42945 | 99.3 |
| CVE-2026-93479 | 68 |
| CVE-2024-24989 | 64.5 |
| CVE-2026-42533 | 59.4 |
| CVE-2026-15176 | 57.9 |
| CVE-2026-97205 | 57.6 |
Coverage16 articles · all time
The latest 16 articles naming NGINX Plus, in the shared story grammar.
Quiet for 2 weekslast report 16 Oct16 articles5 outlets
16 articles from 5 outlets since 14 May. Quiet since 16 Oct.
- Thu 14 May, 06:50 UTC. The Hacker News, first report. NGINX Rift Bug Lets Attackers Run Code Remotely via Malicious URI.
- Thu 14 May, 10:57 UTC. SecurityWeek, its first report on the story. F5 fixes NGINX heap overflow and iControl REST command injection.
- Thu 14 May, 12:31 UTC. SOCRadar, its first report on the story. CVE-2026-42945: NGINX Rewrite Bug Allows Remote Code Execution.
- Thu 14 May, 14:30 UTC. Security Affairs, its first report on the story. NGINX Rift flaw lets attackers run code with one HTTP request.
- Sat 16 May, 10:31 UTC. SecurityWeek. PoC Code Published for Critical NGINX Vulnerability.
- Sun 17 May, 15:01 UTC. The Hacker News. CVE-2026-42945 Exploit Seen In Wild, NGINX Users Urged To Patch.
- Mon 18 May, 07:21 UTC. Security Affairs. NGINX Rift flaw CVE-2026-42945 exploited despite ASLR mitigations.
- Mon 18 May, 08:01 UTC. SecurityWeek. Hackers Exploit NGINX Zero Day CVE-2026-42945 in Wild.
- Mon 25 May, 02:21 UTC. SecurityOnline, its first report on the story. Critical NGINX heap overflow flaw lets attackers hijack servers.
- Thu 16 Jul, 03:06 UTC. SecurityOnline. F5 patches NGINX memory flaw enabling remote code execution.
- Thu 16 Jul, 09:26 UTC. SecurityWeek. F5 patches NGINX heap overflow bug CVE-2026-42533 in eight fixes.
- Mon 20 Jul, 11:11 UTC. Security Affairs. Critical NGINX Flaw CVE-2026-42533 Allows Remote Code Execution.
- Tue 28 Jul, 15:50 UTC. SecurityOnline. NGINX Heap Overflow Flaw (CVE-2026-42533) Patches Released.
- Wed 14 Oct, 18:14 UTC. SecurityOnline. F5 Patches NGINX Flaws That Could Allow Remote Code Execution.
- Fri 16 Oct, 10:22 UTC. SecurityWeek. F5 and Juniper patch critical flaws that could let attackers seize control.
- Fri 16 Oct, 15:01 UTC. Security Affairs. F5 Patches Critical NGINX Flaws That Could Enable Remote Code Execution.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 16 articles as a listHide the list
- Thu 14 MayDay 04
- NGINX Rift Bug Lets Attackers Run Code Remotely via Malicious URI06:50 · The Hacker News · First report
- F5 fixes NGINX heap overflow and iControl REST command injection10:57 · SecurityWeek
- CVE-2026-42945: NGINX Rewrite Bug Allows Remote Code Execution12:31 · SOCRadar
- NGINX Rift flaw lets attackers run code with one HTTP request14:30 · Security Affairs
Quiet for 2 days
Sat 16 MayDay 21- PoC Code Published for Critical NGINX Vulnerability10:31 · SecurityWeek
- Sun 17 MayDay 31
- CVE-2026-42945 Exploit Seen In Wild, NGINX Users Urged To Patch15:01 · The Hacker News
- Mon 18 MayDay 42
- NGINX Rift flaw CVE-2026-42945 exploited despite ASLR mitigations07:21 · Security Affairs
- Hackers Exploit NGINX Zero Day CVE-2026-42945 in Wild08:01 · SecurityWeek
Quiet for 7 days
Mon 25 MayDay 111- Critical NGINX heap overflow flaw lets attackers hijack servers02:21 · SecurityOnline · Picked up again
Quiet for 7 weeks
Thu 16 JulDay 632- F5 patches NGINX memory flaw enabling remote code execution03:06 · SecurityOnline · Picked up again
- F5 patches NGINX heap overflow bug CVE-2026-42533 in eight fixes09:26 · SecurityWeek
Quiet for 4 days
Mon 20 JulDay 671- Critical NGINX Flaw CVE-2026-42533 Allows Remote Code Execution11:11 · Security Affairs · Picked up again
Quiet for 8 days
Tue 28 JulDay 751- NGINX Heap Overflow Flaw (CVE-2026-42533) Patches Released15:50 · SecurityOnline · Picked up again
Quiet for 11 weeks
Wed 14 OctDay 1531- F5 Patches NGINX Flaws That Could Allow Remote Code Execution18:14 · SecurityOnline · Picked up again
Quiet for 2 days
Fri 16 OctDay 1552- F5 and Juniper patch critical flaws that could let attackers seize control10:22 · SecurityWeek
- F5 Patches Critical NGINX Flaws That Could Enable Remote Code Execution15:01 · Security Affairs
All CVEs in coverage6
Exploited first, then by EPSS
F5 NGINX Plus vulnerability
9.2Critical68% EPSS · 8 articlesNGINX map directive and regex matching vulnerability
9.2Critical1.2% EPSS · 3 articlesF5 NGINX Plus vulnerability
7.5High1.1% EPSS · 1 articleF5 NGINX Plus vulnerability
9.2Critical0.9% EPSS · 4 articlesNGINX ngx_http_core_module vulnerability
9.2Critical0.8% EPSS · 3 articlesNGINX ngx_http_core_module vulnerability
9.2Critical0.8% EPSS · 3 articles