VDB
CVE-2026-15176
CVE-2026-15176
PUBLISHED
CVSS 8.600000381469727 HIGH
As of October 14, 2026, F5 is affected by vulnerabilities in the following products: NGINX Gateway Fabric Prior to 2.8.0 NGINX Ingress Controller Prior to 5.7.0 NGINX JavaScript Prior to 1.0.2 NGINX Open Source Prior to 1.30.6 Prior to 1.31.7 NGINX Plus Prior to 37.0.5.1 Prior to 37.1.0.1 Versions R33 to R36 NGINX Instance Manager Prior to 2.24.0 F5 WAF for NGINX Prior to 5.16.0 Prior to 5.14.2 F5 DoS for NGINX Prior to 4.11.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
EPSS 0.84% · 57.7th percentile
Risk Scores
CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.84%
57.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Prior | Prior to 2.24.0 | |
| Prior | Prior to 37.0.5.1 | |
| Versions | Versions R33 to R36 | |
| Prior | Prior to 5.7.0 | |
| Prior | Prior to 5.16.0 | |
| Prior | Prior to 4.11.0 | |
| Prior | Prior to 2.8.0 | |
| Prior | Prior to 1.0.2 | |
| Prior | Prior to 1.30.6 | |
| Prior | Prior to 1.31.7 | |
| Prior | Prior to 5.14.2 | |
| Prior | Prior to 37.1.0.1 |
Timeline
- Oct 14, 2026 Coalition ESS Score
- Oct 14, 2026 CVE Published
- Oct 15, 2026 EPSS Score
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 CVE Updated
- Oct 19, 2026 EPSS Score
- Oct 21, 2026 EPSS Score
- Oct 24, 2026 EPSS Score
- Oct 25, 2026 EPSS Score
References
- https://cyber.gc.ca/en/alerts-advisories/f5-security-advisory-av26-1049 advisory
- https://my.f5.com/manage/s/article/K000162615 vendor
- https://my.f5.com/manage/s/article/K000162617 vendor
- https://my.f5.com/manage/s/article/K000162416 vendor
- https://my.f5.com/manage/s/new-updated-articles#f-f5_document_type=Security%20Advisory vendor