Multiples vulnérabilités dans les produits F5 (03 septembre 2026)
Multiple vulnerabilities have been discovered in F5 products, including potential for remote code execution, privilege escalation, and denial-of-service attacks. These vulnerabilities affect various F5 products, including APM Clients, BIG-IP APM, BIG-IQ, and NGINX Gateway Fabric. Affected versions require immediate patching to mitigate the risks.
F5 has announced multiple security vulnerabilities affecting its products. These vulnerabilities could allow an attacker to compromise data confidentiality and integrity, execute arbitrary code remotely, and cause a denial-of-service. Specifically, the vulnerabilities include remote code execution, privilege escalation, and SSRF attacks. Affected products include APM Clients versions 7.2.x (prior to 7.2.6), BIG-IP APM versions 17.1.x (prior to 17.1.3.1), BIG-IP APM versions 17.5.x (prior to 17.5.1.4), BIG-IP versions 17.1.x (prior to 17.1.3.4), BIG-IP versions 21.0.x (prior to 21.0.0.3), BIG-IP versions 21.1.x (prior to 21.1.0.1), BIG-IQ versions 8.4.x (prior to 8.4.2.1), NGINX Gateway Fabric versions 2.x (prior to 2.6.8), NGINX Ingress Controller versions 2026-lts-rx (prior to 2026-lts-r5), NGINX Ingress Controller versions 5.x (prior to 5.6.0), and NGINX JavaScript versions (prior to 1.0.1). The vulnerabilities are associated with CVE identifiers including CVE-2026-18329, CVE-2026-33278, CVE-2026-42959, CVE-2026-63020, CVE-2026-66362, CVE-2026-66842, CVE-2026-77180, and CVE-2026-78222. F5 recommends referring to their security bulletins for detailed information and patching instructions. These bulletins are available at: https://my.f5.com/manage/s/article/K000162872, https://my.f5.com/manage/s/article/K000161728, https://my.f5.com/manage/s/article/K000162417, https://my.f5.com/manage/s/article/K000162521, https://my.f5.com/manage/s/article/K000162599, https://my.f5.com/manage/s/article/K000162600, https://my.f5.com/manage/s/article/K000162601, https://my.f5.com/manage/s/article/K000162602, https://my.f5.com/manage/s/article/K000162603.