CERTFR-2026-AVI-1317

vendorFRcertfr

FrançaisShown in its original language — a full translation is planned for a future version.

Multiples vulnérabilités dans les produits F5

view advisory published 2026-10-15

A published security advisory; the vulnerabilities below are the ones it describes.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2026-97629USmedium6.5Exploit
Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automaticall…
CVE-2026-97205UShigh8.1Exploit
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server…
CVE-2026-95101USmedium5.3—
Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with proxy_request_buffering on directive, an unauthenticate…
CVE-2026-93479UShigh8.1—
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture v…
CVE-2026-15176UShigh8.1—
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referenci…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan