F5 and Juniper Networks released security fixes for serious flaws that could let attackers crash systems or, in some cases, take full control of them. F5 patched 11 NGINX issues, including critical unauthenticated bugs CVE-2026-15176, CVE-2026-93479, and CVE-2026-97205 that can be triggered with crafted HTTP requests and may lead to remote code execution if address space layout randomization (ASLR) is disabled or bypassed. Juniper published 17 advisories covering more than 150 flaws in Junos OS and Junos OS Evolved, plus four in Juniper Cloud-Native Router, including roughly two dozen critical issues tied to root-level code or command execution, device takeover, crashes, and service disruption.
Why it matters: These are core networking and application-delivery products, so affected organizations should review the advisories and patch quickly even though no in-the-wild exploitation was reported in this article. The practical risk is outage or full device compromise on internet-facing or trusted infrastructure.
Ionut Arghire
2026.10.16
100% relevant
This article establishes a distinct patch cycle story covering newly disclosed critical vulnerabilities in F5 NGINX and Juniper Junos products, and it does not match a more specific existing tracked event.
← Back to all stories