F5 releases out-of-band patches for critical NGINX vulnerabilities

The company, recognized for its load‑balancing and application‑delivery products, issued the patches outside the normal update cycle, signalling an elevated risk assessment. The patches target core flaws in the widely deployed NGINX web server. The release addresses immediate security concerns raised by the discovered flaws.

CyberSecurityNews detailed that the vulnerabilities let remote attackers crash servers and execute malicious code. The Hacker News catalogued five specific flaws, noting a possible remote‑code‑execution path and a TLS bug that could skip client‑certificate validation. SC Media confirmed at least one flaw enables remote‑code execution, while SecurityWeek reported that Juniper Networks also deployed patches for related critical issues, broadening the remediation effort across multiple vendors.

The Hacker News’ count of five flaws differs from CyberSecurityNews’ broader reference to multiple vulnerabilities, producing a minor inconsistency in the reported scope. All outlets agree that patches are now publicly available and that the out‑of‑band release underscores the urgency of remediation. Administrators are urged to deploy the F5 patches promptly to mitigate the identified risks.