Alert GCSA-26270 - Aggiornamento di sicurezza per F5 NGINX

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-26270 Data: 16 ottobre 2026 Titolo: Aggiornamento di sicurezza per F5 NGINX ****************************************************************** :: Descrizione del problema Il produttore F5 ha rilasciato nuove versioni del server NGINX, per risolvere varie vulnerabilita', tra le quali CVE-2026-93479 (CVSS v4 score 9.2 severity CRITICAL) CVE-2026-15176 (CVSS v4 score 9.2 severity CRITICAL) CVE-2026-97205 (CVSS v4 score 9.2 severity CRITICAL) Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato NGINX Open Source versioni precedenti alla 1.30.6 NGINX Open Source versioni precedenti alla 1.31.7 NGINX Plus versioni precedenti alla 37.2.0.1 NGINX Plus versioni precedenti alla 37.1.0.1 NGINX Plus versioni precedenti alla 37.0.7.1 NGINX Plus versioni dalla R33 alla R36 NGINX Gateway Fabric versioni precedenti alla 2.8.0 NGINX Ingress Controller versioni precedenti alla 5.7.0 NGINX Instance Manager versioni precedenti alla 2.24.0 NGINX JavaScript versioni precedenti alla 1.0.2 F5 WAF for NGINX versioni precedenti alla 5.16.0 F5 WAF for NGINX versioni precedenti alla 5.14.2 F5 DoS for NGINX versioni precedenti alla 4.11.0 :: Impatto Esecuzione remota di comandi o codice arbitrario (RCE) Accesso a dati riservati (ID) Denial of Service (DoS) Authentication Bypass :: Soluzioni Applicare gli aggiornamenti appropriati forniti da F5 o da altri produttori che utilizzano questo software. nginx security advisories https://nginx.org/en/security_advisories.html :: Riferimenti nginx news https://nginx.org/2026.html https://nginx.org/en/CHANGES F5 Security Advisory https://my.f5.com/manage/s/new-updated-articles#f-f5_document_type=Security%20Advisory https://my.f5.com/manage/s/article/K000162615 https://my.f5.com/manage/s/article/K000162416 https://my.f5.com/manage/s/article/K000162617 https://my.f5.com/manage/s/article/K000162606 https://my.f5.com/manage/s/article/K000162607 https://my.f5.com/manage/s/article/K000162608 https://my.f5.com/manage/s/article/K000162609 https://my.f5.com/manage/s/article/K000162610 https://my.f5.com/manage/s/article/K000162611 https://my.f5.com/manage/s/article/K000162613 https://my.f5.com/manage/s/article/K000162614 The Hacker News https://thehackernews.com/2026/10/nginx-fixes-5-flaws-including-possible.html CVE ID https://www.cve.org/CVERecord?id=CVE-2026-15176 https://www.cve.org/CVERecord?id=CVE-2026-93479 https://www.cve.org/CVERecord?id=CVE-2026-95101 https://www.cve.org/CVERecord?id=CVE-2026-97629 https://www.cve.org/CVERecord?id=CVE-2026-97205 https://www.cve.org/CVERecord?id=CVE-2026-96615 https://www.cve.org/CVERecord?id=CVE-2026-91184 https://www.cve.org/CVERecord?id=CVE-2026-94197 https://www.cve.org/CVERecord?id=CVE-2026-104939 https://www.cve.org/CVERecord?id=CVE-2026-101019 https://www.cve.org/CVERecord?id=CVE-2026-101025 GARR CERT Security Alert - subscribe/unsubscribe: https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCatHtIwAKCRDBnEyTZRJg Qkm7AKCvXG4xU38QsnZckQmNjOCAaclcSACZAZ0xnptgLl/9L5K1lyio3cjRX5U= =xnAT -----END PGP SIGNATURE-----