F5
Coverage of F5 in the Nexus archive.
- Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution
F5 addressed a critical NGINX vulnerability (CVE-2026-42533) that allows remote, unauthenticated attackers to crash worker processes or potentially execute code via crafted HTTP requests. Fixes were released on July 15 in nginx 1.30.4 (stable), 1.31.3 (mainline), and NGINX Plus 37.0.3.1.
- F5 issues out-of-band patches for critical NGINX vulnerabilities
Cybersecurity company F5 has released out-of-band security updates to address multiple NGINX web server vulnerabilities. The updates include fixes for two critical-severity flaws that could allow attackers to execute code on vulnerable systems.
- NGINX Rift attackers waste no time targeting exposed servers
A newly disclosed NGINX bug, dubbed 'NGINX Rift', is being actively exploited by attackers, with over 5.7 million internet-exposed servers potentially vulnerable. The bug, assigned a CVSS score of 9.2, can cause a crashed worker process and forced restart, and potentially allow code execution in certain configurations. Researchers are seeing active exploitation attempts just days after the CVE was published.