F5 and Juniper Networks have issued patches addressing multiple security flaws in their networking and application delivery products, including critical remote code execution vulnerabilities. The updates were released this week to mitigate risks that could allow attackers to compromise affected systems remotely. F5 specifically addressed 11 security defects in its NGINX platform, with two rated as critical severity.
Among the flaws patched by F5, CVE-2026-15176 and CVE-2026-93479 pose the highest risk, as they could be exploited to execute arbitrary code on vulnerable NGINX instances without authentication. These issues stem from improper input handling in specific modules, allowing remote attackers to send crafted requests that trigger memory corruption. Juniper Networks also released fixes for vulnerabilities in its Junos OS and SRX Series devices, though fewer details were disclosed about the specific CVEs involved. Both vendors emphasized that the patches are available immediately and urged customers to apply them without delay.
Attackers could leverage the NGINX flaws by sending malicious HTTP requests to exposed servers, potentially gaining full control over the affected system. This could lead to data theft, installation of backdoors, or use of the compromised device as a pivot point for further network intrusion. Security researchers noted that while exploitation requires network access to the vulnerable service, the lack of authentication makes these flaws particularly dangerous in internet-facing deployments. F5 confirmed that no active exploitation has been observed in the wild so far, but warned that proof-of-concept code could emerge quickly.
Organizations running affected versions of NGINX should prioritize applying the latest patches from F5’s security advisory. For systems where immediate patching is not possible, temporary mitigations such as restricting access to trusted IP ranges or deploying web application firewalls may reduce exposure. Juniper advised users of its Junos OS to review the security bulletins and upgrade to patched versions as soon as feasible. Both companies highlighted that maintaining up-to-date software is a fundamental defense against known vulnerabilities, especially those involving remote code execution.
Are these vulnerabilities being actively exploited? F5 stated there is no evidence of active exploitation at this time, but the risk remains high due to the nature of the flaws.
Which versions of NGINX are affected? The security advisory specifies that NGINX versions prior to the patched releases are vulnerable, though exact version numbers were not included in the source text.
Should Juniper customers check their SRX devices for exposure? Yes, Juniper Networks recommends all users of Junos OS and SRX Series hardware verify their current version and apply available patches if they are running affected software.