F5 issues out-of-band patches for critical NGINX vulnerabilities

F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on

A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the wild. The

F5 has released security updates to address a critical BIG-IP APM zero-day vulnerability being exploited in remote code execution attacks. [...]

An 18-year-old flaw in the NGINX open-source web server, discovered using an autonomous scanning system, can be exploited for denial of service and, under certain conditions,

<h2> 1. Basic Information </h2> <ul> <li>Original Title: BIG-IP APM OAuth vulnerability</li> <li>Published Date: 2026-09-22</li> <li>Updated Date: 2026-09-23</li> <li>Collection