CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-1642

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response from an upstream proxied server. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 3.9%

CVSS Severity

CVSS v3 Score 5.9

References

Products affected by CVE-2026-1642

F5 » Nginx Gateway Fabric » Version: 1.2.0

cpe:2.3:a:f5:nginx_gateway_fabric:1.2.0
F5 » Nginx Gateway Fabric » Version: 1.6.2

cpe:2.3:a:f5:nginx_gateway_fabric:1.6.2
F5 » Nginx Gateway Fabric » Version: 2.0.0

cpe:2.3:a:f5:nginx_gateway_fabric:2.0.0
F5 » Nginx Gateway Fabric » Version: 2.4.0

cpe:2.3:a:f5:nginx_gateway_fabric:2.4.0
F5 » Nginx Ingress Controller » Version: 3.4.0

cpe:2.3:a:f5:nginx_ingress_controller:3.4.0
F5 » Nginx Ingress Controller » Version: 3.4.1

cpe:2.3:a:f5:nginx_ingress_controller:3.4.1
F5 » Nginx Ingress Controller » Version: 3.4.2

cpe:2.3:a:f5:nginx_ingress_controller:3.4.2
F5 » Nginx Ingress Controller » Version: 3.4.3

cpe:2.3:a:f5:nginx_ingress_controller:3.4.3
F5 » Nginx Ingress Controller » Version: 3.5.0

cpe:2.3:a:f5:nginx_ingress_controller:3.5.0
F5 » Nginx Ingress Controller » Version: 3.5.1

cpe:2.3:a:f5:nginx_ingress_controller:3.5.1
F5 » Nginx Ingress Controller » Version: 3.5.2

cpe:2.3:a:f5:nginx_ingress_controller:3.5.2
F5 » Nginx Ingress Controller » Version: 3.6.0

cpe:2.3:a:f5:nginx_ingress_controller:3.6.0
F5 » Nginx Ingress Controller » Version: 3.6.1

cpe:2.3:a:f5:nginx_ingress_controller:3.6.1
F5 » Nginx Ingress Controller » Version: 3.6.2

cpe:2.3:a:f5:nginx_ingress_controller:3.6.2
F5 » Nginx Ingress Controller » Version: 3.7.0

cpe:2.3:a:f5:nginx_ingress_controller:3.7.0
F5 » Nginx Ingress Controller » Version: 3.7.1

cpe:2.3:a:f5:nginx_ingress_controller:3.7.1
F5 » Nginx Ingress Controller » Version: 3.7.2

cpe:2.3:a:f5:nginx_ingress_controller:3.7.2
F5 » Nginx Ingress Controller » Version: 4.0.0

cpe:2.3:a:f5:nginx_ingress_controller:4.0.0
F5 » Nginx Ingress Controller » Version: 4.0.1

cpe:2.3:a:f5:nginx_ingress_controller:4.0.1
F5 » Nginx Ingress Controller » Version: 5.0.0

cpe:2.3:a:f5:nginx_ingress_controller:5.0.0
F5 » Nginx Ingress Controller » Version: 5.3.0

cpe:2.3:a:f5:nginx_ingress_controller:5.3.0
F5 » Nginx Ingress Controller » Version: 5.3.2

cpe:2.3:a:f5:nginx_ingress_controller:5.3.2
F5 » Nginx Instance Manager » Version: 2.15.1

cpe:2.3:a:f5:nginx_instance_manager:2.15.1
F5 » Nginx Instance Manager » Version: 2.16.0

cpe:2.3:a:f5:nginx_instance_manager:2.16.0
F5 » Nginx Instance Manager » Version: 2.17.0

cpe:2.3:a:f5:nginx_instance_manager:2.17.0
F5 » Nginx Instance Manager » Version: 2.17.1

cpe:2.3:a:f5:nginx_instance_manager:2.17.1
F5 » Nginx Instance Manager » Version: 2.17.2

cpe:2.3:a:f5:nginx_instance_manager:2.17.2
F5 » Nginx Instance Manager » Version: 2.17.3

cpe:2.3:a:f5:nginx_instance_manager:2.17.3
F5 » Nginx Instance Manager » Version: 2.17.4

cpe:2.3:a:f5:nginx_instance_manager:2.17.4
F5 » Nginx Instance Manager » Version: 2.18.0

cpe:2.3:a:f5:nginx_instance_manager:2.18.0
F5 » Nginx Instance Manager » Version: 2.19.0

cpe:2.3:a:f5:nginx_instance_manager:2.19.0
F5 » Nginx Instance Manager » Version: 2.19.1

cpe:2.3:a:f5:nginx_instance_manager:2.19.1
F5 » Nginx Instance Manager » Version: 2.21.0

cpe:2.3:a:f5:nginx_instance_manager:2.21.0
F5 » Nginx Open Source » Version: 1.11.0

cpe:2.3:a:f5:nginx_open_source:1.11.0
F5 » Nginx Open Source » Version: 1.11.1

cpe:2.3:a:f5:nginx_open_source:1.11.1
F5 » Nginx Open Source » Version: 1.11.10

cpe:2.3:a:f5:nginx_open_source:1.11.10
F5 » Nginx Open Source » Version: 1.11.11

cpe:2.3:a:f5:nginx_open_source:1.11.11
F5 » Nginx Open Source » Version: 1.11.12

cpe:2.3:a:f5:nginx_open_source:1.11.12
F5 » Nginx Open Source » Version: 1.11.13

cpe:2.3:a:f5:nginx_open_source:1.11.13
F5 » Nginx Open Source » Version: 1.11.2

cpe:2.3:a:f5:nginx_open_source:1.11.2
F5 » Nginx Open Source » Version: 1.11.3

cpe:2.3:a:f5:nginx_open_source:1.11.3
F5 » Nginx Open Source » Version: 1.11.4

cpe:2.3:a:f5:nginx_open_source:1.11.4
F5 » Nginx Open Source » Version: 1.11.5

cpe:2.3:a:f5:nginx_open_source:1.11.5
F5 » Nginx Open Source » Version: 1.11.6

cpe:2.3:a:f5:nginx_open_source:1.11.6
F5 » Nginx Open Source » Version: 1.11.7

cpe:2.3:a:f5:nginx_open_source:1.11.7
F5 » Nginx Open Source » Version: 1.11.8

cpe:2.3:a:f5:nginx_open_source:1.11.8
F5 » Nginx Open Source » Version: 1.11.9

cpe:2.3:a:f5:nginx_open_source:1.11.9
F5 » Nginx Open Source » Version: 1.13.0

cpe:2.3:a:f5:nginx_open_source:1.13.0
F5 » Nginx Open Source » Version: 1.13.1

cpe:2.3:a:f5:nginx_open_source:1.13.1
F5 » Nginx Open Source » Version: 1.13.10

cpe:2.3:a:f5:nginx_open_source:1.13.10
F5 » Nginx Open Source » Version: 1.13.11

cpe:2.3:a:f5:nginx_open_source:1.13.11
F5 » Nginx Open Source » Version: 1.13.12

cpe:2.3:a:f5:nginx_open_source:1.13.12
F5 » Nginx Open Source » Version: 1.13.2

cpe:2.3:a:f5:nginx_open_source:1.13.2
F5 » Nginx Open Source » Version: 1.13.3

cpe:2.3:a:f5:nginx_open_source:1.13.3
F5 » Nginx Open Source » Version: 1.13.4

cpe:2.3:a:f5:nginx_open_source:1.13.4
F5 » Nginx Open Source » Version: 1.13.5

cpe:2.3:a:f5:nginx_open_source:1.13.5
F5 » Nginx Open Source » Version: 1.13.6

cpe:2.3:a:f5:nginx_open_source:1.13.6
F5 » Nginx Open Source » Version: 1.13.7

cpe:2.3:a:f5:nginx_open_source:1.13.7
F5 » Nginx Open Source » Version: 1.13.8

cpe:2.3:a:f5:nginx_open_source:1.13.8
F5 » Nginx Open Source » Version: 1.13.9

cpe:2.3:a:f5:nginx_open_source:1.13.9
F5 » Nginx Open Source » Version: 1.15.0

cpe:2.3:a:f5:nginx_open_source:1.15.0
F5 » Nginx Open Source » Version: 1.15.1

cpe:2.3:a:f5:nginx_open_source:1.15.1
F5 » Nginx Open Source » Version: 1.15.10

cpe:2.3:a:f5:nginx_open_source:1.15.10
F5 » Nginx Open Source » Version: 1.15.11

cpe:2.3:a:f5:nginx_open_source:1.15.11
F5 » Nginx Open Source » Version: 1.15.12

cpe:2.3:a:f5:nginx_open_source:1.15.12
F5 » Nginx Open Source » Version: 1.15.2

cpe:2.3:a:f5:nginx_open_source:1.15.2
F5 » Nginx Open Source » Version: 1.15.3

cpe:2.3:a:f5:nginx_open_source:1.15.3
F5 » Nginx Open Source » Version: 1.15.4

cpe:2.3:a:f5:nginx_open_source:1.15.4
F5 » Nginx Open Source » Version: 1.15.5

cpe:2.3:a:f5:nginx_open_source:1.15.5
F5 » Nginx Open Source » Version: 1.15.6

cpe:2.3:a:f5:nginx_open_source:1.15.6
F5 » Nginx Open Source » Version: 1.15.7

cpe:2.3:a:f5:nginx_open_source:1.15.7
F5 » Nginx Open Source » Version: 1.15.8

cpe:2.3:a:f5:nginx_open_source:1.15.8
F5 » Nginx Open Source » Version: 1.15.9

cpe:2.3:a:f5:nginx_open_source:1.15.9
F5 » Nginx Open Source » Version: 1.17.0

cpe:2.3:a:f5:nginx_open_source:1.17.0
F5 » Nginx Open Source » Version: 1.17.1

cpe:2.3:a:f5:nginx_open_source:1.17.1
F5 » Nginx Open Source » Version: 1.17.10

cpe:2.3:a:f5:nginx_open_source:1.17.10
F5 » Nginx Open Source » Version: 1.17.2

cpe:2.3:a:f5:nginx_open_source:1.17.2
F5 » Nginx Open Source » Version: 1.17.3

cpe:2.3:a:f5:nginx_open_source:1.17.3
F5 » Nginx Open Source » Version: 1.17.4

cpe:2.3:a:f5:nginx_open_source:1.17.4
F5 » Nginx Open Source » Version: 1.17.5

cpe:2.3:a:f5:nginx_open_source:1.17.5
F5 » Nginx Open Source » Version: 1.17.6

cpe:2.3:a:f5:nginx_open_source:1.17.6
F5 » Nginx Open Source » Version: 1.17.7

cpe:2.3:a:f5:nginx_open_source:1.17.7
F5 » Nginx Open Source » Version: 1.17.8

cpe:2.3:a:f5:nginx_open_source:1.17.8
F5 » Nginx Open Source » Version: 1.17.9

cpe:2.3:a:f5:nginx_open_source:1.17.9
F5 » Nginx Open Source » Version: 1.19.0

cpe:2.3:a:f5:nginx_open_source:1.19.0
F5 » Nginx Open Source » Version: 1.19.1

cpe:2.3:a:f5:nginx_open_source:1.19.1
F5 » Nginx Open Source » Version: 1.19.10

cpe:2.3:a:f5:nginx_open_source:1.19.10
F5 » Nginx Open Source » Version: 1.19.2

cpe:2.3:a:f5:nginx_open_source:1.19.2
F5 » Nginx Open Source » Version: 1.19.3

cpe:2.3:a:f5:nginx_open_source:1.19.3
F5 » Nginx Open Source » Version: 1.19.4

cpe:2.3:a:f5:nginx_open_source:1.19.4
F5 » Nginx Open Source » Version: 1.19.5

cpe:2.3:a:f5:nginx_open_source:1.19.5
F5 » Nginx Open Source » Version: 1.19.6

cpe:2.3:a:f5:nginx_open_source:1.19.6
F5 » Nginx Open Source » Version: 1.19.7

cpe:2.3:a:f5:nginx_open_source:1.19.7
F5 » Nginx Open Source » Version: 1.19.8

cpe:2.3:a:f5:nginx_open_source:1.19.8
F5 » Nginx Open Source » Version: 1.19.9

cpe:2.3:a:f5:nginx_open_source:1.19.9
F5 » Nginx Open Source » Version: 1.21.0

cpe:2.3:a:f5:nginx_open_source:1.21.0
F5 » Nginx Open Source » Version: 1.21.1

cpe:2.3:a:f5:nginx_open_source:1.21.1
F5 » Nginx Open Source » Version: 1.21.2

cpe:2.3:a:f5:nginx_open_source:1.21.2
F5 » Nginx Open Source » Version: 1.21.3

cpe:2.3:a:f5:nginx_open_source:1.21.3
F5 » Nginx Open Source » Version: 1.21.4

cpe:2.3:a:f5:nginx_open_source:1.21.4
F5 » Nginx Open Source » Version: 1.21.5

cpe:2.3:a:f5:nginx_open_source:1.21.5
F5 » Nginx Open Source » Version: 1.21.6

cpe:2.3:a:f5:nginx_open_source:1.21.6
F5 » Nginx Open Source » Version: 1.23.0

cpe:2.3:a:f5:nginx_open_source:1.23.0
F5 » Nginx Open Source » Version: 1.23.1

cpe:2.3:a:f5:nginx_open_source:1.23.1
F5 » Nginx Open Source » Version: 1.23.2

cpe:2.3:a:f5:nginx_open_source:1.23.2
F5 » Nginx Open Source » Version: 1.23.3

cpe:2.3:a:f5:nginx_open_source:1.23.3
F5 » Nginx Open Source » Version: 1.23.4

cpe:2.3:a:f5:nginx_open_source:1.23.4
F5 » Nginx Open Source » Version: 1.25.0

cpe:2.3:a:f5:nginx_open_source:1.25.0
F5 » Nginx Open Source » Version: 1.25.1

cpe:2.3:a:f5:nginx_open_source:1.25.1
F5 » Nginx Open Source » Version: 1.25.2

cpe:2.3:a:f5:nginx_open_source:1.25.2
F5 » Nginx Open Source » Version: 1.25.3

cpe:2.3:a:f5:nginx_open_source:1.25.3
F5 » Nginx Open Source » Version: 1.25.4

cpe:2.3:a:f5:nginx_open_source:1.25.4
F5 » Nginx Open Source » Version: 1.25.5

cpe:2.3:a:f5:nginx_open_source:1.25.5
F5 » Nginx Open Source » Version: 1.26.1

cpe:2.3:a:f5:nginx_open_source:1.26.1
F5 » Nginx Open Source » Version: 1.26.2

cpe:2.3:a:f5:nginx_open_source:1.26.2
F5 » Nginx Open Source » Version: 1.27.0

cpe:2.3:a:f5:nginx_open_source:1.27.0
F5 » Nginx Open Source » Version: 1.27.1

cpe:2.3:a:f5:nginx_open_source:1.27.1
F5 » Nginx Open Source » Version: 1.27.2

cpe:2.3:a:f5:nginx_open_source:1.27.2
F5 » Nginx Open Source » Version: 1.27.3

cpe:2.3:a:f5:nginx_open_source:1.27.3
F5 » Nginx Open Source » Version: 1.27.4

cpe:2.3:a:f5:nginx_open_source:1.27.4
F5 » Nginx Open Source » Version: 1.27.5

cpe:2.3:a:f5:nginx_open_source:1.27.5
F5 » Nginx Open Source » Version: 1.29.0

cpe:2.3:a:f5:nginx_open_source:1.29.0
F5 » Nginx Open Source » Version: 1.29.1

cpe:2.3:a:f5:nginx_open_source:1.29.1
F5 » Nginx Open Source » Version: 1.29.2

cpe:2.3:a:f5:nginx_open_source:1.29.2
F5 » Nginx Open Source » Version: 1.29.3

cpe:2.3:a:f5:nginx_open_source:1.29.3
F5 » Nginx Open Source » Version: 1.29.4

cpe:2.3:a:f5:nginx_open_source:1.29.4
F5 » Nginx Open Source » Version: 1.3.0

cpe:2.3:a:f5:nginx_open_source:1.3.0
F5 » Nginx Open Source » Version: 1.3.1

cpe:2.3:a:f5:nginx_open_source:1.3.1
F5 » Nginx Open Source » Version: 1.3.10

cpe:2.3:a:f5:nginx_open_source:1.3.10
F5 » Nginx Open Source » Version: 1.3.11

cpe:2.3:a:f5:nginx_open_source:1.3.11
F5 » Nginx Open Source » Version: 1.3.12

cpe:2.3:a:f5:nginx_open_source:1.3.12
F5 » Nginx Open Source » Version: 1.3.13

cpe:2.3:a:f5:nginx_open_source:1.3.13
F5 » Nginx Open Source » Version: 1.3.14

cpe:2.3:a:f5:nginx_open_source:1.3.14
F5 » Nginx Open Source » Version: 1.3.15

cpe:2.3:a:f5:nginx_open_source:1.3.15
F5 » Nginx Open Source » Version: 1.3.16

cpe:2.3:a:f5:nginx_open_source:1.3.16
F5 » Nginx Open Source » Version: 1.3.2

cpe:2.3:a:f5:nginx_open_source:1.3.2
F5 » Nginx Open Source » Version: 1.3.3

cpe:2.3:a:f5:nginx_open_source:1.3.3
F5 » Nginx Open Source » Version: 1.3.4

cpe:2.3:a:f5:nginx_open_source:1.3.4
F5 » Nginx Open Source » Version: 1.3.5

cpe:2.3:a:f5:nginx_open_source:1.3.5
F5 » Nginx Open Source » Version: 1.3.6

cpe:2.3:a:f5:nginx_open_source:1.3.6
F5 » Nginx Open Source » Version: 1.3.7

cpe:2.3:a:f5:nginx_open_source:1.3.7
F5 » Nginx Open Source » Version: 1.3.8

cpe:2.3:a:f5:nginx_open_source:1.3.8
F5 » Nginx Open Source » Version: 1.3.9

cpe:2.3:a:f5:nginx_open_source:1.3.9
F5 » Nginx Open Source » Version: 1.4.0

cpe:2.3:a:f5:nginx_open_source:1.4.0
F5 » Nginx Open Source » Version: 1.5.0

cpe:2.3:a:f5:nginx_open_source:1.5.0
F5 » Nginx Open Source » Version: 1.5.1

cpe:2.3:a:f5:nginx_open_source:1.5.1
F5 » Nginx Open Source » Version: 1.5.10

cpe:2.3:a:f5:nginx_open_source:1.5.10
F5 » Nginx Open Source » Version: 1.5.11

cpe:2.3:a:f5:nginx_open_source:1.5.11
F5 » Nginx Open Source » Version: 1.5.12

cpe:2.3:a:f5:nginx_open_source:1.5.12
F5 » Nginx Open Source » Version: 1.5.13

cpe:2.3:a:f5:nginx_open_source:1.5.13
F5 » Nginx Open Source » Version: 1.5.2

cpe:2.3:a:f5:nginx_open_source:1.5.2
F5 » Nginx Open Source » Version: 1.5.3

cpe:2.3:a:f5:nginx_open_source:1.5.3
F5 » Nginx Open Source » Version: 1.5.4

cpe:2.3:a:f5:nginx_open_source:1.5.4
F5 » Nginx Open Source » Version: 1.5.5

cpe:2.3:a:f5:nginx_open_source:1.5.5
F5 » Nginx Open Source » Version: 1.5.6

cpe:2.3:a:f5:nginx_open_source:1.5.6
F5 » Nginx Open Source » Version: 1.5.7

cpe:2.3:a:f5:nginx_open_source:1.5.7
F5 » Nginx Open Source » Version: 1.5.8

cpe:2.3:a:f5:nginx_open_source:1.5.8
F5 » Nginx Open Source » Version: 1.5.9

cpe:2.3:a:f5:nginx_open_source:1.5.9
F5 » Nginx Open Source » Version: 1.7.0

cpe:2.3:a:f5:nginx_open_source:1.7.0
F5 » Nginx Open Source » Version: 1.7.1

cpe:2.3:a:f5:nginx_open_source:1.7.1
F5 » Nginx Open Source » Version: 1.7.10

cpe:2.3:a:f5:nginx_open_source:1.7.10
F5 » Nginx Open Source » Version: 1.7.11

cpe:2.3:a:f5:nginx_open_source:1.7.11
F5 » Nginx Open Source » Version: 1.7.12

cpe:2.3:a:f5:nginx_open_source:1.7.12
F5 » Nginx Open Source » Version: 1.7.2

cpe:2.3:a:f5:nginx_open_source:1.7.2
F5 » Nginx Open Source » Version: 1.7.3

cpe:2.3:a:f5:nginx_open_source:1.7.3
F5 » Nginx Open Source » Version: 1.7.4

cpe:2.3:a:f5:nginx_open_source:1.7.4
F5 » Nginx Open Source » Version: 1.7.5

cpe:2.3:a:f5:nginx_open_source:1.7.5
F5 » Nginx Open Source » Version: 1.7.6

cpe:2.3:a:f5:nginx_open_source:1.7.6
F5 » Nginx Open Source » Version: 1.7.7

cpe:2.3:a:f5:nginx_open_source:1.7.7
F5 » Nginx Open Source » Version: 1.7.8

cpe:2.3:a:f5:nginx_open_source:1.7.8
F5 » Nginx Open Source » Version: 1.7.9

cpe:2.3:a:f5:nginx_open_source:1.7.9
F5 » Nginx Open Source » Version: 1.9.0

cpe:2.3:a:f5:nginx_open_source:1.9.0
F5 » Nginx Open Source » Version: 1.9.1

cpe:2.3:a:f5:nginx_open_source:1.9.1
F5 » Nginx Open Source » Version: 1.9.10

cpe:2.3:a:f5:nginx_open_source:1.9.10
F5 » Nginx Open Source » Version: 1.9.11

cpe:2.3:a:f5:nginx_open_source:1.9.11
F5 » Nginx Open Source » Version: 1.9.12

cpe:2.3:a:f5:nginx_open_source:1.9.12
F5 » Nginx Open Source » Version: 1.9.13

cpe:2.3:a:f5:nginx_open_source:1.9.13
F5 » Nginx Open Source » Version: 1.9.14

cpe:2.3:a:f5:nginx_open_source:1.9.14
F5 » Nginx Open Source » Version: 1.9.15

cpe:2.3:a:f5:nginx_open_source:1.9.15
F5 » Nginx Open Source » Version: 1.9.2

cpe:2.3:a:f5:nginx_open_source:1.9.2
F5 » Nginx Open Source » Version: 1.9.3

cpe:2.3:a:f5:nginx_open_source:1.9.3
F5 » Nginx Open Source » Version: 1.9.4

cpe:2.3:a:f5:nginx_open_source:1.9.4
F5 » Nginx Open Source » Version: 1.9.5

cpe:2.3:a:f5:nginx_open_source:1.9.5
F5 » Nginx Open Source » Version: 1.9.6

cpe:2.3:a:f5:nginx_open_source:1.9.6
F5 » Nginx Open Source » Version: 1.9.7

cpe:2.3:a:f5:nginx_open_source:1.9.7
F5 » Nginx Open Source » Version: 1.9.8

cpe:2.3:a:f5:nginx_open_source:1.9.8
F5 » Nginx Open Source » Version: 1.9.9

cpe:2.3:a:f5:nginx_open_source:1.9.9
F5 » Nginx Plus » Version: r32

cpe:2.3:a:f5:nginx_plus:r32
F5 » Nginx Plus » Version: r33

cpe:2.3:a:f5:nginx_plus:r33
F5 » Nginx Plus » Version: r34

cpe:2.3:a:f5:nginx_plus:r34
F5 » Nginx Plus » Version: r35

cpe:2.3:a:f5:nginx_plus:r35
F5 » Nginx Plus » Version: r36

cpe:2.3:a:f5:nginx_plus:r36

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-1642

Products

Pricing

Contact Us