Nginx Plus

Vendor:

First CVE: Oct 19, 2022 · Active for 3 years

27

Total CVEs

More Total CVEs than 96% of tracked products

5.4

Avg CVEs / Year

Higher CVE frequency than 89% of tracked products

6.2

Avg CVSS

Higher Avg CVSS than 24% of tracked products

3.7%

KEV Rate

Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Nginx Plus over time

Volume of CVEsAvg CVSS Base Score

First CVE

Oct 19, 2022

3 years ago

Most Recent CVE

Jul 15, 2026

9 days ago

CVE Severity & Scoring

Nginx Plus27 CVEs

11%

44%

All CVEs352,231 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local3 (11.1%)

Network24 (88.9%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low13 (48.1%)

High14 (51.9%)

Unknown0 (0.0%)

User Interaction

None27 (100.0%)

Unknown0 (0.0%)

Required0 (0.0%)

Privileges Required

Low5 (18.5%)

High0 (0.0%)

None22 (81.5%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (27 CVEs).

27 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2023-44487HIGH The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through	Oct 10, 2023	7.5	97	YES	YES
CVE-2026-42945HIGH NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or s	May 13, 2026	8.1	79	NO	NO
CVE-2026-27654HIGH NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker to trigger a buffer overflow to the NGINX worker process; this	Mar 24, 2026	8.2	47	NO	NO
CVE-2026-42055HIGH NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 o	Jun 17, 2026	8.1	43	NO	NO
CVE-2026-9256HIGH NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct,	May 22, 2026	8.1	43	NO	NO
CVE-2026-32647HIGH NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX work	Mar 24, 2026	7.8	33	NO	NO
CVE-2026-42946HIGH A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data. When scgi_pass or uwsgi	May 13, 2026	7.4	31	NO	NO
CVE-2026-27651HIGH When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate. This issue may occur when (1)	Mar 24, 2026	7.5	31	NO	NO
CVE-2026-40460MEDIUM When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or	May 13, 2026	6.5	30	NO	NO
CVE-2026-40701MEDIUM NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directiv	May 13, 2026	4.8	28	NO	NO

View all 27 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (27 CVEs).

CISA KEV

1 CVE

3.7% of CVEs· 97th percentile

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

1 CVE

3.7% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (27 CVEs).

Media Mentions

Signals from CVEs in this product scope (27 CVEs).

Top CNAs Publishing CVEs For Nginx Plus

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	KEV	Exploits
r36	7	6.9	4.1%	0	0
r35	7	6.8	4.6%	0	0
r34	7	6.3	4.3%	0	0
r33	8	6.1	3.9%	0	0
r32	10	6.4	3.6%	0	0
r31	10	6.3	1.3%	0	0
r30	9	6.3	5.7%	1	1
r3	1	8.1	3.5%	0	0
r29	1	7.5	100.0%	1	1