Serial number: AV26-1049
Date: October 15, 2026
As of October 14, 2026, F5 is affected by vulnerabilities in the following products:
- NGINX Gateway Fabric
- Prior to 2.8.0
- NGINX Ingress Controller
- Prior to 5.7.0
- NGINX JavaScript
- Prior to 1.0.2
- NGINX Open Source
- Prior to 1.30.6
- Prior to 1.31.7
- NGINX Plus
- Prior to 37.0.5.1
- Prior to 37.1.0.1
- Versions R33 to R36
- NGINX Instance Manager
- Prior to 2.24.0
- F5 WAF for NGINX
- Prior to 5.16.0
- Prior to 5.14.2
- F5 DoS for NGINX
- Prior to 4.11.0
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.