F5 Patches NGINX Vulnerability That Enables Code Execution and DoS Attacks

F5 published an out-of-band advisory (June 17, 2026) reporting multiple high-severity vulnerabilities in NGINX Open Source, NGINX Plus, NGINX Gateway Fabric and related products — including CVE-2026-42530 (ngx_http_v3_module) and CVE-2026-42055 (proxy/grpc modules) — that can lead to memory corruption, remote code execution or denial-of-service; several fixes are released for core NGINX and Gateway Fabric but some F5/NGINX products currently lack direct patches, so administrators are urged to apply patches or temporary mitigations immediately.