Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities
Incident
Report for Linode
Resolved
Akamai has completed its investigation of the recently published F5/NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479). We have not identified any impact to Akamai’s platform or infrastructure.
If you run a vulnerable version of NGINX Open Source or NGINX Plus on a Linode instance, follow F5/NGINX guidance and apply the available patches. No further updates are planned for this notice.
If you run a vulnerable version of NGINX Open Source or NGINX Plus on a Linode instance, follow F5/NGINX guidance and apply the available patches. No further updates are planned for this notice.
Investigating
Akamai is aware of the recently published F5/NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479), and our teams are actively investigating their potential impact across our platform and infrastructure.
F5 has released out-of-band security patches addressing three critical severity vulnerabilities in NGINX Open Source and NGINX Plus. These vulnerabilities may allow unauthenticated attackers to trigger heap buffer overflows, which could cause a denial of service or potential remote code execution if ASLR is bypassed.
If you are running a vulnerable version of NGINX Open Source or NGINX Plus on a Linode instance, we recommend following guidance from F5/NGINX and applying available patches.
We will provide updates as additional information becomes available.
F5 has released out-of-band security patches addressing three critical severity vulnerabilities in NGINX Open Source and NGINX Plus. These vulnerabilities may allow unauthenticated attackers to trigger heap buffer overflows, which could cause a denial of service or potential remote code execution if ASLR is bypassed.
If you are running a vulnerable version of NGINX Open Source or NGINX Plus on a Linode instance, we recommend following guidance from F5/NGINX and applying available patches.
We will provide updates as additional information becomes available.
This incident affected: Customer Service, Documentation and Community (Customer Security Advisory).