#f5
7 articles
CVE-2026-94127: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker...
CVE-2026-40701: High-Severity Denial of Service in NGINX (Bundle K000160932)
Denial of Service vulnerability in NGINX causing worker process crash, published alongside critical CVE-2026-42945 (RCE with public PoC) as part of F5 advisory K000160932...
CVE-2026-42934: High-Severity Out-of-Bounds Read in NGINX (Bundle K000160932)
Out-of-bounds read vulnerability in NGINX - may lead to disclosure of process memory contents (info disclosure). Published alongside critical CVE-2026-42945 in F5 advisory K000160932...
CVE-2026-42945: Critical RCE in NGINX ngx_http_rewrite_module (Public PoC Available)
Critical RCE vulnerability in NGINX ngx_http_rewrite_module present in source code since 2008 - heap buffer overflow in rewrite and set directive handling allows unauthenticated remote code execution...
CVE-2026-42946: High-Severity Use-After-Free in NGINX (Bundle K000160932)
Use-after-free vulnerability in NGINX published alongside critical CVE-2026-42945 (RCE with public PoC) - potentially allows remote code execution or destabilization of the worker process...
CVE-2026-41225: Arbitrary Command Execution in F5 BIG-IP iControl REST
Vulnerability in F5 BIG-IP iControl REST allows a highly privileged authenticated attacker with at least the Manager role to create configuration objects that enable running arbitrary commands...
CVE-2025-53521: F5 BIG-IP Unspecified Vulnerability
F5 BIG-IP AMP contains an unspecified vulnerability that could allow a threat actor to achieve remote code execution....