F5 security advisories, July 2026

Every F5 security advisory published in July 2026, from F5 SIRT ([email protected] CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 8
Critical: 1
High: 5
In CISA KEV: 0
CVEs: 8

F5 advisories published in July 2026

Jul 15, 2026
Critical [CVE-2026-42533] vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable
Critical9.2
Jul 15, 2026
High [CVE-2026-60005] NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module
High8.8
Jul 15, 2026
High [CVE-2026-56434] NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module
High8.3
Jul 15, 2026
High [CVE-2026-52865] When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permission to create or modify Ingress or TransportServer resources can cause the NGINX Ingress Controller process to terminate
High7.1
Jul 15, 2026
High [CVE-2026-55723] When NGINX Ingress Controller is configured with Custom Resource Definitions (CRDs) or Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller
High8.7
Jul 15, 2026
High [CVE-2026-59762] BIG-IP: When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization
High8.7
Jul 15, 2026
Medium [CVE-2026-60065] When NGINX Plus is configured to use the Message Queuing Telemetry Transport (MQTT) filter module (ngx_stream_mqtt_filter_module), unauthenticated attackers can send requests with conditions beyond the attacker's control to cause a heap buffer over-read in the NGINX worker process, leading to a restart
Medium6.3
Jul 15, 2026
Medium [CVE-2026-60062] The NGINX Agent config_dirs directive allows a low-privileged attacker to gain limited read and write access to files outside of the designated secure directory
Medium5.3

Get an email when F5 publishes the next one.

See F5's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about F5

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.