F5 releases out-of-band patches for critical NGINX vulnerabilities

F5 has released out-of-band security patches for multiple NGINX flaws, including three critical vulnerabilities in the ngx_http_v3_module (CVE-2026-15176 and CVE-2026-97205) and the NGINX map directive (CVE-2026-93479), BleepingComputer reports. Unprivileged remote attackers can exploit them for denial of service or, in some configurations, code execution via heap-based buffer overflow or use-after-free in the NGINX worker process; F5 has not flagged them as exploited in the wild.