F5 Patches Critical Vulnerabilities in BIG-IP, NGINX, and Related Products

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

F5 Issues Security Fixes for Vulnerabilities in BIG-IP and NGINX Products On February 4, 2026, F5 released its Quarterly Security Notification addressing critical vulnerabilities in BIG-IP, NGINX, and related products. The vulnerabilities include medium and low-severity CVEs and a security exposure that could lead to denial-of-service (DoS) risks and configuration weaknesses, affecting high-traffic environments such as web application firewalls and Kubernetes ingress. No active exploits have been reported at this time. 3 sources 57