F
Vendor security profile9 actively exploited CVEs
f5
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs81
Critical4
CISA KEV9
Public exploit11
Patch rate%17
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
0
4
0
25
5
8
0
3
0
CVE KEV
CVE severity distribution
81toplam CVE
Critical4 (5%)
High45 (56%)
Medium25 (31%)
Low1 (1%)
Uncertain6 (7%)
Patch and exploitation view
%17
Verified patch
%11
CISA KEV
%14
Public exploit
14Patch available
0Partial
8Workaround
0Vendor: no patch
59Unknown
Latest vulnerabilities
9.8
CVE-2026-94127 Actively exploited
BIG-IP APM OAuth vulnerability
F
WorkaroundEPSS %2
6.5
CVE-2026-90439
NGINX ngx_http_v3_module vulnerability
F
Patch status unknownEPSS %0
3.1
CVE-2026-63020
Vulnerability in F5 Big Ip Access Policy Manager
F
Patch status unknownEPSS %0
8.2
CVE-2026-60005
Vulnerability in F5 Nginx Open Source
F
Patch status unknownEPSS %1
5.3
CVE-2026-60065
Out-of-bounds read in F5 Nginx Plus
F
Patch status unknownEPSS %0
6.4
CVE-2026-60062
Path traversal in F5 Nginx Agent
F
Patch status unknownEPSS %0
7.5
CVE-2026-59762
Resource allocation without limits in F5 Big Ip Next Cloud Native Network Functions
F
Patch status unknownEPSS %1
6.5
CVE-2026-56434
Use after free in F5 Nginx Plus
F
Patch verifiedEPSS %0
8.3
CVE-2026-55723
Vulnerability in F5 Nginx Ingress Controller
F
Patch status unknownEPSS %1
6.5
CVE-2026-52865
NULL pointer dereference in F5 Nginx Ingress Controller
F
Patch status unknownEPSS %1