F5 Security Updates – 16 July 2026

The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, manipulate files, obtain sensitive information, or execute arbitrary code on the affected system.

Sample of the addressed vulnerabilities:

1. NGINX Ingress Controller Vulnerability (CVE-2026-55723):

• CVSS: 8.3
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: File Manipulation

2. NGINX ngx_http_slice_module Vulnerability (CVE-2026-60005):

• CVSS: 8.2
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Obtain Information

Sample of the affected products:

• NGINX Ingress Controller.
• NGINX Instance Manager.
• F5 WAF for NGINX.
• NGINX Agent.
• BIG-IP.