WhatBrokeToday
FAQ
Today's Trends
minorResolvedAkamai

Akamai: Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities

  1. Investigating(done)
  2. Trending(skipped)
  3. Workaround available(skipped)
  4. Resolved(current)

Executive summary

Akamai is investigating the potential impact of newly published critical F5/NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479) across its platform and infrastructure. F5 has released out-of-band security patches for NGINX Open Source and NGINX Plus to address these issues. The incident has been resolved.

No verified workaround yet

This incident was resolved upstream without a reported workaround.

Official fix
Technical root cause

Unauthenticated attackers could potentially trigger heap buffer overflows leading to a denial of service.

Evidence

1 report · 1 StatusShow
  1. [1]
    Status First report
    Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities(opens official status page in a new tab)

    Investigating: Akamai is aware of the recently published F5/NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479), and our teams are investigating their potential impact across our platform and infrastructure.F5 has released out-of-band security patches addressing three critical severity vulnerabilities in NGINX Open Source and NGINX Plus. These vulnerabilities may allow unauthenticated attackers to trigger heap buffer overflows, which could cause a denial of service or…

    by akamai status

Timeline

  1. First report on status page

    Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities

    Source
  2. Official statement

    Investigating: Akamai is aware of the recently published F5/NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479), and our teams are investigating their potential impact across our platform and infrastructure.F5 has released out-of-band security patches addressing three critical severity vulnerabilities in NGINX Open Source and NGINX Plus.

    Source
  3. Status changed

    Status changed: new → resolved (official status page reports resolution).