Medium severity6.5NVD Advisory· Published May 5, 2022· Updated Jun 17, 2026

CVE-2022-27495

Description

On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected products

F5, Inc./Nginx Service Meshv52 versions
1.3.x+ 1 more
- (no CPE)range: 1.3.x
- (no CPE)range: <1.4.0
Nginx/Service Meshllm-create
Range: <1.4.0

Patches

Vulnerability mechanics

References

support.f5.com/csp/article/K94093538nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000