FrançaisIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Multiples vulnérabilités dans les produits F5
Advisory ansehen veröffentlicht 2026-10-19
Eine veröffentlichte Sicherheitsmeldung; die Schwachstellen unten werden von ihr beschrieben.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-97629US | medium6.5 | Exploit | ||
Description
When NGINX Plus or NGINX Open Source is configured with ssl_session_cache
shared:name:size
without an explicit ssl_session_ticket_key file directives to automaticall… | ||||
| CVE-2026-97205US | high8.1 | Exploit | ||
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server… | ||||
| CVE-2026-96615US | medium6.5 | — | ||
Description
NGINX Gateway Fabric has a vulnerability when it is configured with Gateway
Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agen… | ||||
| CVE-2026-95101US | medium5.3 | — | ||
Description
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with
proxy_request_buffering on directive, an unauthenticate… | ||||
| CVE-2026-94197US | high7.5 | — | ||
An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the `ExternalAuth` policy or Ingress external a… | ||||
| CVE-2026-93479US | high8.1 | — | ||
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture v… | ||||
| CVE-2026-91184US | high8.8 | — | ||
Description
NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and u… | ||||
| CVE-2026-15176US | high8.1 | — | ||
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referenci… | ||||
| CVE-2026-104939US | high7.5 | — | ||
Description
NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAut… | ||||
| CVE-2026-101025US | medium5.3 | — | ||
Description
NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register clea… | ||||
| CVE-2026-101019US | medium6.5 | — | ||
Description
NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan