AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

F5 security advisories

17 advisories · 13 critical or high in 12 months · latest Sep 22

Advisories page

17 advisories

Critical 9.3Sep 22F5 BIG-IP: remote code executionCVE-2026-94127fixed in Hotfix-BIGIP-21.1.0.2.0.30.22-ENG +2Medium 6.9Sep 15F5 NGINX: buffer overflowCVE-2026-90439fixed in Plus 37.1.1.2 +3Critical 9.2Sep 2F5 NGINX JavaScript: out-of-bounds writeCVE-2026-78689fixed in 1.0.1High 8.7Sep 2When NGINX Ingress Controller is configured with Ingress annotationsCVE-2026-77180fixed in 5.6.0 +1High 8.7Sep 2F5 NGINX JavaScript: denial of serviceCVE-2026-78222fixed in 1.0.1Low 2.3Sep 2F5 BIG-IP: attacker could spoof error messages Impact: An attacker mayCVE-2026-63020fixed in 21.1.0.1 +3High 8.6Sep 2Description: When NGINX Plus is configured as the data plane for NGINX Gateway...CVE-2026-66362fixed in 2.6.8High 8.7Sep 2F5 BIG-IP: privilege escalationCVE-2026-66842fixed in 21.1.0.1 +4High 8.8Sep 2Description NGINX JavaScriptCVE-2026-18329fixed in 1.0.1High 8.8Jul 15F5 NGINX: uninitialized resourceCVE-2026-60005fixed in Plus 37.0.3.1 +3Medium 5.3Jul 15F5 NGINX: path traversalCVE-2026-60062fixed in 2.47.0 +1Medium 6.3Jul 15F5 NGINX Plus: out-of-bounds readCVE-2026-60065fixed in 37.0.3.1 +1High 8.7Jul 15F5 BIG-IP: denial of serviceCVE-2026-59762fixed in 21.1.0.1 +7High 8.7Jul 15When NGINX Ingress Controller is configured with Custom Resource DefinitionsCVE-2026-55723fixed in 5.5.2 +1High 8.3Jul 15F5 NGINX: use after freeCVE-2026-56434fixed in Plus 37.0.3.1 +3High 7.1Jul 15F5 NGINX Ingress Controller: denial of serviceCVE-2026-52865fixed in 5.5.2 +1Critical 9.2Jul 15F5 NGINX Plus: buffer overflowCVE-2026-42533fixed in 37.0.3.1 +3
About F5

Security advisories F5 publishes for its own products.

my.f5.com/manage/s/new-updated-articles#sort=%40f5_updated_published_date%20descending&f:@f5_document_type=[Security%20Advisory]&periodFilter=4&dateField=0F5

F5 elsewhere on Ibis: Paydays