F5, Juniper Networks Patch Critical Vulnerabilities
F5 and Juniper patched critical NGINX and Junos flaws that can lead to remote code execution.
F5 patched 11 NGINX vulnerabilities, including critical flaws CVE-2026-15176, CVE-2026-93479, and CVE-2026-97205. Unauthenticated attackers can use crafted HTTP requests to cause buffer overflows or memory corruption; remote code execution is possible if ASLR is disabled or bypassed. Juniper Networks issued 17 advisories covering more than 150 defects in Junos OS and Junos OS Evolved plus four bugs in Juniper Cloud-Native Router, including about two dozen critical issues that can yield root code execution or device takeover. Neither company reported in-the-wild exploitation.
- F5 patched 11 NGINX flaws, including three critical issues that can lead to RCE.
- CVE-2026-15176 and CVE-2026-93479 are unauthenticated flaws triggered by crafted HTTP requests.
- Juniper published 17 advisories covering more than 150 Junos defects and four JCNR bugs.
- Neither vendor reported exploitation in the wild.
- Vendors
- F5Juniper Networks
- Organizations
- F5Juniper Networks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-15176+2 related CVEs | NGINX heap overflow via alias and $request_filename | 9.2 | — |
From the original article
1 min read at securityweek.com
Successful exploitation of some of these issues could lead to remote code execution and full device takeover. The post F5, Juniper Networks Patch Critical Vulnerabilities appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.