CVE-2020-27730

CRITICAL 9.8CVE-2020-27730 · Published 11/12/2020 · updated 17/06/2026

In short

CVE-2020-27730 is a CRITICAL (CVSS 9.8) vulnerability affecting nginx controller (f5).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.4% of all vulnerabilities.
Fix: update to 3.10.0 or later.

Package	Affected versions	Patched versions
nginx controller f5	`= 1.0.1≥ 2.0.0, ≤ 2.9.0≥ 3.0.0, < 3.10.0`	`3.10.0`

In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 1.0.1≥ 2.0.0, ≤ 2.9.0≥ 3.0.0, < 3.10.0

3.10.0

More vulnerabilities in nginx controller

See all →