F5 issues out-of-band patches for three critical NGINX flaws enabling DoS or code execution
F5 released out-of-band security patches for multiple NGINX flaws, including three critical vulnerabilities: CVE-2026-15176 and CVE-2026-97205 in the ngxhttpv3module, and CVE-2026-93479 in the NGINX map directive. Unprivileged remote attackers can exploit them against systems with non-default configurations to cause denial of service or, …