CVE-2026-50107— NGINX Gateway Fabric vulnerability
Possible ATT&CK Techniques 3AI
T1059 · Command and Scripting Interpreter T1659 · Content Injection T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| F5 | NGINX Gateway Fabric | 2.3.0< 2.6.4 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-50107
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
NGINX Gateway Fabric vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the NginxProxy Custom Resource Definition (CRD) access log format setting are rendered directly into NGINX configuration templates without sanitization or escaping. An authenticated attacker with permission to create or modify these CRDs may craft values that inject arbitrary NGINX configuration directives. This is a control plane issue; there is no data plane exposure from the vulnerability trigger itself. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
输出中的特殊元素转义处理不恰当(注入)
Source: CVE Program / CVE List V5
Vulnerability Title
F5 nginx gateway fabric 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
F5 nginx gateway fabric是美国F5公司的一款API网关管理解决方案。 F5 nginx gateway fabric 2.3.0版本至2.6.4之前版本存在安全漏洞，该漏洞源于NGINX配置生成器组件中用户提供的NginxProxy自定义资源定义（CRD）访问日志格式设置字符串值未经清理或转义直接渲染到NGINX配置模板，可能导致经过身份验证且具有创建或修改这些CRD权限的攻击者注入任意NGINX配置指令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| F5 | NGINX Gateway Fabric | 2.3.0 ~ 2.6.4 | - |
II. Public POCs for CVE-2026-50107
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-50107
请登录查看更多情报信息。
Other References for CVE-2026-50107 (1)
- https://my.f5.com/manage/s/article/K000161785vendor-advisory
Same Patch Batch · F5 · 2026-06-17 · 6 CVEs total
| CVE-2026-42530 | 8.1 HIGH | NGINX Open-Source ngx_http_v3_module vulnerability |
| CVE-2026-42055 | 8.1 HIGH | NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability |
| CVE-2026-11311 | 8.1 HIGH | NGINX Gateway Fabric vulnerability |
| CVE-2026-32682 | 6.5 MEDIUM | NGINX Gateway Fabric vulnerability |
| CVE-2026-48142 | 4.8 MEDIUM | NGINX ngx_http_charset_module vulnerability |
IV. Related Vulnerabilities
Same vendor: F5
Same weakness: CWE-74
- CVE-2026-53572
KEDA: PostgreSQL connection string parameter injection via i - CVE-2026-76993
GreyDGL PentestGPT Web-Page Crawling injection - CVE-2026-55558
aiosmtplib: STARTTLS response injection - CVE-2026-76365
Structured Query Language (SQL) Injection through Custom Lis - CVE-2026-20231
Cisco Secure Workload Software Security Hardening Release Au
V. Comments for CVE-2026-50107
No comments yet