Index

Search

Search the public record. Drafts and scheduled notes are not included.

news

F5 patches three NGINX memory flaws rated CVSS 9.2

F5 fixed CVE-2026-97205, CVE-2026-93479 and CVE-2026-15176 in NGINX Plus and NGINX Open Source on 14 October 2026. Each is CVSS 4.0 9.2 (Critical, scored by F5); nginx.org rates them medium. Specific configurations are needed. Update OSS to 1.31.7 or 1.30.6 and Plus to 37.1.0.1 or 37.0.5.1. Not in KEV.

Published 8h ago

CriticalNo PoC

CVE-2026-15176

NGINX alias with rewrite heap buffer overflow in worker process

RCE

Published 16h ago

CriticalNo PoC

CVE-2026-93479

NGINX map regex capture heap buffer overflow in worker process

RCE

Published 16h ago

CriticalNo PoC

CVE-2026-97205

NGINX SSI with AIO use-after-free in worker process

RCE

Published 16h ago