F5 and Juniper Patch Critical RCE Vulnerabilities
F5 and Juniper Networks have released patches for dozens of vulnerabilities across their products, including critical flaws that could enable remote code execution. The companies did not say that any of the vulnerabilities had been exploited in the wild.
Radwan AbdulhadiEditor and technology writer
F5 addresses critical NGINX flaws
F5 announced fixes for 11 security defects in NGINX, including three vulnerabilities described as critical. The issues affect the security and application delivery company’s NGINX products and include flaws that could result in remote code execution under specific conditions.
Two of the critical vulnerabilities, CVE-2026-15176 and CVE-2026-93479, could be exploited without authentication by sending crafted HTTP requests. Under conditions outside an attacker’s control, successful exploitation could trigger a buffer overflow and cause a restart. If address space layout randomization, or ASLR, is disabled or bypassed, the flaws could also allow remote code execution.
A third critical issue, CVE-2026-97205, could cause memory corruption or terminate the NGINX worker process. The vulnerability could also lead to remote code execution if ASLR is disabled. The source material does not identify the affected NGINX versions or provide additional conditions required for exploitation.
Other NGINX security defects
F5’s remaining NGINX fixes address a broader group of security problems. According to the company’s advisory information, the defects could allow attackers to bypass verification or validation controls, read sensitive information, spoof request attributes, inject data into proxied requests, cause unbounded memory growth, or access protected paths before authentication.
The available details do not indicate that these other vulnerabilities share the same exploitation path or impact as the three critical issues. They nevertheless extend the scope of the update beyond memory-safety problems and remote code execution, covering authentication-related access controls, request handling and resource consumption.
Juniper publishes 17 advisories
Juniper Networks published 17 advisories covering more than 150 security defects in Junos OS and Junos OS Evolved. The company also disclosed four vulnerabilities affecting Juniper Cloud-Native Router, known as JCNR. Juniper’s security advisory publication provides the company’s detailed notices for the affected products.
Approximately two dozen of the Juniper vulnerabilities are critical-severity issues. The reported consequences include code or command execution with root privileges, complete device takeover, kernel panic, crashes, Routing Engine reboots, service disruption and buffer overflows caused by an off-by-one error.
The range of impacts reflects the different components and defects described across the advisories. Some issues affect the operating system or device execution environment, while others can interrupt routing functions, force system failures or create conditions for an attacker to take control of a device.
High-severity issues also patched
Juniper also patched multiple high-severity vulnerabilities. The source material says these flaws could lead to remote code execution, denial-of-service attacks and other forms of compromise, although it does not provide a single combined count or a complete breakdown of the affected components.
The Juniper disclosures therefore include both critical issues with the potential for root-level execution or full device takeover and high-severity defects with impacts such as service interruption and remote code execution. The advisories cover Junos OS, Junos OS Evolved and JCNR rather than a single product line.
No exploitation reported
Neither F5 nor Juniper Networks said that any of the vulnerabilities had been exploited in the wild. That statement does not change the potential severity described in the advisories, particularly for the unauthenticated NGINX issues and Juniper flaws that could permit root-level code or command execution.
The disclosures come amid a broader series of vulnerability updates from major technology providers. In this case, the published information centers on applying the vendors’ fixes across internet-facing application delivery infrastructure, network operating systems and cloud-native routing deployments, without providing evidence of active attacks against the specific flaws.
Sources
- SecurityWeekF5, Juniper Networks Patch Critical Vulnerabilities
Continue chronologically
Related stories
Critical F5 BIG-IP Zero-Day Vulnerability Exploited
F5 and CISA warn organizations about a critical F5 BIG-IP zero-day vulnerability being actively exploited by threat actors for remote code execution.
AI Speeds Up Cyberattacks, But Security Fundamentals Endure
As Frontier AI accelerates vulnerability discovery, security experts stress that traditional defense-in-depth and strong fundamentals remain vital.
Cloudflare Reclaims 100TB of RAM With Math and Rust
Cloudflare says a statistical redesign of consistent hashing cut more than 100TB of RAM from a Pingora-based service across its global network.
CISA Warns Hackers Are Exploiting Critical Node2Shell Flaw
CISA warns that hackers are actively exploiting the critical Node2Shell Brotli flaw, prompting emergency patches and strict federal remediation deadlines.
