{"metadata": {"vulnerability": "CVE-2026-15176", "count": 64, "kinds": {"milestone": 14, "sighting": 11, "kev": 0, "other": 39}}, "data": [{"timestamp": "2026-07-08T22:14:15.972Z", "date_only": false, "value": "2026-07-08T22:14:15.972Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-15176", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1317", "record": "CERTFR-2026-AVI-1317", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1341", "record": "CERTFR-2026-AVI-1341", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-14T14:00:00Z", "date_only": false, "value": "2026-10-14T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / f5", "record": "CVE-2026-15176", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T14:40:26.374Z", "date_only": false, "value": "2026-10-14T14:40:26.374Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15176", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T14:40:26.374Z", "date_only": false, "value": "2026-10-14T14:40:26.374000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-14T14:40:26.374Z", "date_only": false, "value": "2026-10-14T14:40:26.374Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / f5", "record": "CVE-2026-15176", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:40:26.740Z", "date_only": false, "value": "2026-10-14T14:40:26.740000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-14T14:40:27.487Z", "date_only": false, "value": "2026-10-14T14:40:27.487000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-14T14:40:28.955Z", "date_only": false, "value": "2026-10-14T14:40:28.955000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-14T14:51:01.008Z", "date_only": false, "value": "2026-10-14T14:51:01.008670+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-14T14:51:32.715Z", "date_only": false, "value": "2026-10-14T14:51:32.715700+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-14T14:52:20.558Z", "date_only": false, "value": "2026-10-14T14:52:20.558649+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-14T14:53:01.952Z", "date_only": false, "value": "2026-10-14T14:53:01.952789+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-14T15:17:19Z", "date_only": false, "value": "2026-10-14T15:17:19Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CVV4-J4MX-W8Q5", "record": "GHSA-CVV4-J4MX-W8Q5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T15:17:19.140Z", "date_only": false, "value": "2026-10-14T15:17:19.140", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15176", "record": "FKIE_CVE-2026-15176", "field": "published"}, {"timestamp": "2026-10-14T15:32:28Z", "date_only": false, "value": "2026-10-14T15:32:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CVV4-J4MX-W8Q5", "record": "GHSA-CVV4-J4MX-W8Q5", "field": "published"}, {"timestamp": "2026-10-14T15:32:28Z", "date_only": false, "value": "2026-10-14T15:32:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CVV4-J4MX-W8Q5", "record": "GHSA-CVV4-J4MX-W8Q5", "field": "modified"}, {"timestamp": "2026-10-14T15:52:30.364Z", "date_only": false, "value": "2026-10-14T15:52:30.364976Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxtvplbz7y2t", "record": "CVE-2026-15176", "field": "creation_timestamp", "uuid": "8af46822-8f27-43f8-9a28-f05eaedb012d", "content": "F5 patched three NGINX vulnerabilities (CVE-2026-97205, CVE-2026-93479, CVE-2026-15176) rated 9.2 Critical in F5 NGINX Plus and Open Source. Upgrade today.\n\n#NGINX #F5Networks #CVE202697205 #CVE202693479 #CVE202615176 #Cybersecurity #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxtvplbz7y2t"}, {"timestamp": "2026-10-14T16:10:33.128Z", "date_only": false, "value": "2026-10-14T16:10:33.128110Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtwpuoeqh22", "record": "CVE-2026-15176", "field": "creation_timestamp", "uuid": "122827c7-fae7-41de-8ddd-3fdf4ae986da", "content": "\ud83d\udea8 CVE-2026-15176 \u2014 CVSS 9.2 CRITICAL\n\nA vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alia...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-15176\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtwpuoeqh22"}, {"timestamp": "2026-10-14T17:20:04.813Z", "date_only": false, "value": "2026-10-14T17:20:04.813993Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxu2m73s5422", "record": "CVE-2026-15176", "field": "creation_timestamp", "uuid": "c1cec7cb-22c8-4b4e-8977-0a7c913a31aa", "content": "CVE-2026-15176 - nginx plus\nBoth NGINX Plus and the open\u2011source version can be forced to stop working or run unwanted code when a web rule uses the alias feature together with certain rewrite or logging\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nginxplus #f5 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxu2m73s5422"}, {"timestamp": "2026-10-14T20:11:11.700Z", "date_only": false, "value": "2026-10-14T20:11:11.700869Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441079979334912", "record": "CVE-2026-15176", "field": "creation_timestamp", "uuid": "5d35dce7-2b80-464c-943b-6136b3a2df89", "content": "CVE-2026-15176 NGINX ngx_http_core_module vulnerability A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable. Alternatively, the same result could be achieved when the $request_filename variable is used in an access log format directive. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.\nImpact:This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only.\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\nhttps://www.cve.org/CVERecord?id=CVE-2026-15176https://my.f5.com/manage/s/article/K000162416#F5 #NGINXPlus #NGINXOpenSource#CVE_2026_15176#bot", "url": "https://infosec.exchange/users/cve/statuses/117441079979334912"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12143-1", "record": "OPENSUSE-SU-2026:12143-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12143-1", "record": "OPENSUSE-SU-2026:12143-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12143-1", "record": "OPENSUSE-SU-2026:12143-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1317", "record": "CERTFR-2026-AVI-1317", "field": "last_revision_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1317", "record": "CERTFR-2026-AVI-1317", "field": "initial_release_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12143-1", "record": "OPENSUSE-SU-2026:12143-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-15176", "record": "UBUNTU-CVE-2026-15176", "field": "published"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1317", "record": "CERTFR-2026-AVI-1317", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-15176", "record": "UBUNTU-CVE-2026-15176", "field": "modified"}, {"timestamp": "2026-10-15T02:42:54Z", "date_only": false, "value": "2026-10-15T02:42:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-15T02:42:54Z", "date_only": false, "value": "2026-10-15T02:42:54+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-15T02:42:54Z", "date_only": false, "value": "2026-10-15T02:42:54+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-15T03:56:59.608Z", "date_only": false, "value": "2026-10-15T03:56:59.608538Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-15176", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T03:56:59.608Z", "date_only": false, "value": "2026-10-15T03:56:59.608538Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15176", "record": "FKIE_CVE-2026-15176", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T10:31:15.809Z", "date_only": false, "value": "2026-10-15T10:31:15.809Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-15176", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T10:31:15.809Z", "date_only": false, "value": "2026-10-15T10:31:15.809Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-15176", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T11:17:28.110Z", "date_only": false, "value": "2026-10-15T11:17:28.110", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15176", "record": "FKIE_CVE-2026-15176", "field": "lastModified"}, {"timestamp": "2026-10-15T11:20:30Z", "date_only": false, "value": "2026-10-15T11:20:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/f5-security-advisory-av26-1049", "record": "CVE-2026-15176", "field": "creation_timestamp", "uuid": "5f6a2960-f45a-4423-9010-e18fddaefbc8", "url": "https://cyber.gc.ca/en/alerts-advisories/f5-security-advisory-av26-1049"}, {"timestamp": "2026-10-16T07:25:30.469Z", "date_only": false, "value": "2026-10-16T07:25:30.469051Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxy2cu53kf2v", "record": "CVE-2026-15176", "field": "creation_timestamp", "uuid": "b620d4ed-caba-4977-b128-1373e3356ec5", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) (suite)\n\u2022 NGINX (ngx http core module) (CVE-2026-15176), CVSS 9.2 (Cyberveille Esant\u00e9)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mxy2cu53kf2v"}, {"timestamp": "2026-10-16T09:51:37Z", "date_only": false, "value": "2026-10-16T09:51:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12143-1", "record": "OPENSUSE-SU-2026:12143-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-16T09:51:37Z", "date_only": false, "value": "2026-10-16T09:51:37Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12143-1", "record": "OPENSUSE-SU-2026:12143-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T13:58:03.096Z", "date_only": false, "value": "2026-10-16T13:58:03.096558Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-a29693b2-322e7ea838c0fc3e", "record": "CVE-2026-15176", "field": "creation_timestamp", "uuid": "1abe847f-99ba-46f7-89b6-51d1159a086a", "content": "F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application delivery firm F5 announced fixes for eleven security issues in NGINX. Among them, critical vulnerabilities tracked as CVE-2026-15176 and CVE-2026-93479 could be exploited without authentication via crafted HTTP requests. Under certain conditions beyond their control, an [\u2026]F5 addressed critical RCE flaws in NGINX", "url": "https://poliverso.org/objects/0477a01e-a29693b2-322e7ea838c0fc3e"}, {"timestamp": "2026-10-16T13:58:34.060Z", "date_only": false, "value": "2026-10-16T13:58:34.060245Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxyqaxqjgbh2", "record": "CVE-2026-15176", "field": "creation_timestamp", "uuid": "e23e731c-3d78-4f72-8054-34bd55a4b217", "content": "F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application delivery firm F5 announced fixes for eleven security issues in NGINX. Among them, critical vulnerabilities tracked as CVE-2026-15176 and [\u2026]", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxyqaxqjgbh2"}, {"timestamp": "2026-10-17T01:07:37Z", "date_only": false, "value": "2026-10-17T01:07:37.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-15176", "record": "MSRC_CVE-2026-15176", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-17T01:07:37Z", "date_only": false, "value": "2026-10-17T01:07:37.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-15176", "record": "MSRC_CVE-2026-15176", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-17T01:07:37Z", "date_only": false, "value": "2026-10-17T01:07:37.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-15176", "record": "MSRC_CVE-2026-15176", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-17T01:07:37Z", "date_only": false, "value": "2026-10-17T01:07:37.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-15176", "record": "MSRC_CVE-2026-15176", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-17T06:05:41.395Z", "date_only": false, "value": "2026-10-17T06:05:41.395901Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-15176", "record": "BELL-CVE-2026-15176", "field": "published"}, {"timestamp": "2026-10-17T07:00:38.101Z", "date_only": false, "value": "2026-10-17T07:00:38.101Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-15176", "record": "MSRC_CVE-2026-15176", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1341", "record": "CERTFR-2026-AVI-1341", "field": "last_revision_date"}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1341", "record": "CERTFR-2026-AVI-1341", "field": "initial_release_date"}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1341", "record": "CERTFR-2026-AVI-1341", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-19T02:08:55Z", "date_only": false, "value": "2026-10-19T02:08:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.dk/news/2026-10-19/F5-og-Juniper-lukker-kritiske-saarbarheder", "record": "CVE-2026-15176", "field": "creation_timestamp", "uuid": "eeaf114c-255e-4416-b11b-c640c7e22413", "url": "https://www.cert.dk/news/2026-10-19/F5-og-Juniper-lukker-kritiske-saarbarheder"}, {"timestamp": "2026-10-19T06:27:50Z", "date_only": false, "value": "2026-10-19T06:27:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-heap-based-buffer-overflows-nginx-plus-and-nginx-open-source-can-be-exploited", "record": "CVE-2026-15176", "field": "creation_timestamp", "uuid": "52297717-ecec-41a7-8c87-cb8e81ddc235", "url": "https://ccb.belgium.be/advisories/warning-heap-based-buffer-overflows-nginx-plus-and-nginx-open-source-can-be-exploited"}, {"timestamp": "2026-10-19T11:48:54Z", "date_only": false, "value": "2026-10-19T11:48:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-20T04:11:04Z", "date_only": false, "value": "2026-10-20T04:11:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-20T04:11:04Z", "date_only": false, "value": "2026-10-20T04:11:04+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-20T04:11:04Z", "date_only": false, "value": "2026-10-20T04:11:04+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:83427", "record": "RHSA-2026:83427", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-20T09:06:51.375Z", "date_only": false, "value": "2026-10-20T09:06:51.375763Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117472441730194321", "record": "CVE-2026-15176", "field": "creation_timestamp", "uuid": "9f99b05e-8d4d-4aae-9858-1b94b0f5cc74", "content": "F5 releases out-of-band patches for critical NGINX vulnerabilities\nF5 has released out-of-band security patches for multiple NGINX flaws, including three critical vulnerabilities in the ngx_http_v3_module (CVE-2026-15176 and CVE-2026-97205) and the NGINX map directive (CVE-2026-93479), BleepingComputer reports. Unprivileged remote attackers can exploit them for denial of service or, in some configurations, code execution via heap-based buffer overflow or use-after-free in the NGINX worker process; F5 has not flagged them as exploited in the wild. https://www.bleepingcomputer.com/news/security/f5-releases-out-of-band-patches-for-critical-nginx-vulnerabilities/", "url": "https://infosec.exchange/users/edwardk/statuses/117472441730194321"}, {"timestamp": "2026-10-20T15:30:29.203Z", "date_only": false, "value": "2026-10-20T15:30:29.20340Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-15176", "record": "BELL-CVE-2026-15176", "field": "modified"}, {"timestamp": "2026-10-21T08:53:28.604Z", "date_only": false, "value": "2026-10-21T08:53:28.604Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-NGINX-2026-15176", "record": "BIT-NGINX-2026-15176", "field": "published"}, {"timestamp": "2026-10-21T09:15:38.550Z", "date_only": false, "value": "2026-10-21T09:15:38.550Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-NGINX-2026-15176", "record": "BIT-NGINX-2026-15176", "field": "modified"}]}