F5 Patches Critical, High-Severity NGINX Vulnerabilities

F5 has released emergency security updates for NGINX to address multiple vulnerabilities, including two critical flaws with a CVSS score of 9.2 that could allow unauthenticated attackers to execute arbitrary code or cause denial-of-service conditions. The most severe bugs, CVE-2026-42530 and CVE-2026-42055, affect HTTP modules and involve use-after-free and heap-based buffer overflow issues that can be exploited if security protections like ASLR are disabled or bypassed. While there's no evidence of active exploitation yet, F5 is urging users to install patches promptly, especially since NGINX has been a recent target in cyberattacks.