CyberSIXT Search
Vendor

F5

CVEs tracked · all time
18
in CISA KEV · all time
4
articles · since 11 Sep
14
articles · all time
45

14 articles since 11 Sep; 1 CISA notice, marked below the bars.

Show as table
F5: articles per day
Day (UTC)Articles
Tue 15 Sep1
Tue 22 Sep2
Wed 23 Sep4
Thu 24 Sep1
Fri 25 Sep1
Mon 28 Sep2
Wed 14 Oct1
Fri 16 Oct2
See the full timeline
Products: BIG-IP, BIG-IP and BIG-IQ Centralized Management, BIG-IQ, NGINX Gateway Fabric and 2 more
BIG-IPBIG-IP and BIG-IQ Centralized ManagementBIG-IQNGINX Gateway FabricNGINX Open SourceNGINX Plus

CVEs

18 CVEs
CVE-2026-94127F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityCVSS9.8CriticalExploited2.2%EPSS10articles
CVE-2021-22986F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution VulnerabilityCVSS9.8CriticalExploited99.8%EPSS0articles
CVE-2022-1388F5 BIG-IP Missing Authentication VulnerabilityCVSS9.8CriticalExploited99.9%EPSS1article
CVE-2025-53521F5 BIG-IP Stack-Based Buffer Overflow VulnerabilityCVSS9.8CriticalExploited2.3%EPSS13articles
CVE-2026-15176NGINX ngx_http_core_module vulnerabilityCVSS9.2Critical–Not in KEV0.8%EPSS3articles
CVE-2026-93479NGINX map directive and regex matching vulnerabilityCVSS9.2Critical–Not in KEV0.6%EPSS3articles
CVE-2026-97205NGINX ngx_http_core_module vulnerabilityCVSS9.2Critical–Not in KEV0.8%EPSS3articles
CVE-2026-42530F5 NGINX Open Source vulnerabilityCVSS9.2Critical–Not in KEV1.5%EPSS5articles
CVE-2026-42533F5 NGINX Plus vulnerabilityCVSS9.2Critical–Not in KEV0.9%EPSS4articles
CVE-2026-42055F5 NGINX Open Source vulnerabilityCVSS9.2Critical–Not in KEV6.5%EPSS4articles
CVE-2026-11311F5 NGINX Gateway Fabric vulnerabilityCVSS8.6High–Not in KEV0.6%EPSS1article
CVE-2026-50107NGINX Gateway Fabric vulnerabilityCVSS8.6High–Not in KEV0.5%EPSS1article
6 more CVEs
CVE-2024-24989F5 NGINX Plus vulnerabilityCVSS7.5High–Not in KEV1.1%EPSS1article
CVE-2026-42945F5 NGINX Plus vulnerabilityCVSS9.2Critical–Not in KEV3.4%EPSS8articles
CVE-2026-41225F5 BIG-IP vulnerabilityCVSS9.1Critical–Not in KEV0.5%EPSS1article
CVE-2026-41957F5 BIG-IP vulnerabilityCVSS8.8High–Not in KEV0.9%EPSS1article
CVE-2026-34176F5 BIG-IP vulnerabilityCVSS8.7High–Not in KEV0.9%EPSS1article
CVE-2026-39459F5 BIG-IP vulnerabilityCVSS8.6High–Not in KEV0.5%EPSS1article

Coverage

45 articles, all timeFull timeline RSS feed
  1. F5 Patches Critical NGINX Flaws That Could Enable Remote Code ExecutionSecurity Affairs
  2. F5 and Juniper patch critical flaws that could let attackers seize controlSecurityWeek
  3. F5 Patches NGINX Flaws That Could Allow Remote Code ExecutionSecurityOnline
  4. Check Point Warns of Active Exploits and AI-Powered AttacksCheck Point
  5. Nine Flaws Exploited as Attackers Target Edge Products and WordPressSecurityOnline
  6. F5 Patches Exploited BIG-IP Zero-Day Enabling Remote Code ExecutionSecurityOnline
  7. Critical Flaws Put VeloCloud, BIG-IP and Rancher Systems at RiskSecurityOnline
  8. CISA Warns of Active Attacks on Check Point and F5 FlawsSecurity Affairs
  9. F5 Patches Exploited BIG-IP Flaw Allowing Unauthenticated Code ExecutionSecurity Affairs
  10. F5 BIG-IP Flaw Enables Unauthenticated Remote Code ExecutionRapid7
  11. F5 BIG-IP APM zero-day lets attackers execute code remotelySecurityWeek
  12. CISA Warns of Active Attacks Exploiting Critical F5 BIG-IP FlawCISA · official notice
  13. F5 Warns Hackers Are Exploiting Critical BIG-IP APM FlawSecurityOnline
  14. Attackers Exploited Fortinet and F5 Flaws to Target Thai ISP 3BBSecurityWeek
  15. Fileless PoisonedRefresh Rootkit Targets F5 BIG-IP APM SystemsSecurity Affairs
  16. F5 BIG-IP Flaw Hid In-Memory Web Shells from Disk ScansThe Hacker News
  17. Stealth Linux Rootkit Targets F5 BIG-IP Appliances via RCESecurityOnline
  18. CVE-2026-42530: NGINX HTTP/3 flaw allows remote code executionSecurityOnline
  19. NGINX Heap Overflow Flaw (CVE-2026-42533) Patches ReleasedSecurityOnline
  20. Critical NGINX Flaw CVE-2026-42533 Allows Remote Code ExecutionSecurity Affairs
  21. F5 patches NGINX heap overflow bug CVE-2026-42533 in eight fixesSecurityWeek
  22. F5 patches NGINX memory flaw enabling remote code executionSecurityOnline
  23. F5 releases patches for critical NGINX HTTP/3 and HTTP/2 flawsSOCRadar
  24. F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)SecurityOnline
  25. F5 Patches Critical NGINX Vulnerabilities Enabling Unauthenticated Code ExecutionSecurity Affairs
  26. F5 patches NGINX remote code flaws CVE-2026-42530, CVE-2026-42055SecurityWeek
  27. Critical NGINX heap overflow flaw lets attackers hijack serversSecurityOnline
  28. Hackers Exploit NGINX Zero Day CVE-2026-42945 in WildSecurityWeek
  29. NGINX Rift flaw CVE-2026-42945 exploited despite ASLR mitigationsSecurity Affairs
  30. CVE-2026-42945 Exploit Seen In Wild, NGINX Users Urged To PatchThe Hacker News
  31. PoC Code Published for Critical NGINX VulnerabilitySecurityWeek
  32. NGINX Rift flaw lets attackers run code with one HTTP requestSecurity Affairs
  33. CVE-2026-42945: NGINX Rewrite Bug Allows Remote Code ExecutionSOCRadar
  34. F5 fixes NGINX heap overflow and iControl REST command injectionSecurityWeek
  35. NGINX Rift Bug Lets Attackers Run Code Remotely via Malicious URIThe Hacker News
  36. F5 BIGIP APM Servers Exposed as CVE-2025-53521 Actively ExploitedSecurity Affairs
  37. CVE-2025-53521: F5 BIG-IP APM Flaw Reclassified as Unauthenticated RCESOCRadar
  38. NCSC Urges Immediate Patching of F5 BIG-IP BugInfosecurity
  39. Fortinet BIG-IP Vulnerability Reclassified as RCE, Under ExploitationDark Reading
  40. Vulnerability affecting F5 BIG-IP APMNCSC · official notice
  41. F5 BIG-IP DoS Flaw Upgraded to Critical RCE, Now Exploited in the WildSecurityWeek
  42. U.S. CISA adds a flaw in F5 BIG-IP AMP to its Known Exploited Vulnerabilities catalogSecurity Affairs
  43. CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM ExploitationThe Hacker News
  44. CISA Adds CVE-2025-53521 to Known Exploited Vulnerabilities CatalogueCISA · official notice
  45. CISA Adds CVE-2025-53521 to Known Exploited Vulnerabilities CatalogueCISA · first in our coverage · official notice

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device