# Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities

- Provider: [Akamai Cloud (Linode)](https://down.guide/providers/linode)
- Confidence: Confirmed
- Impact: Operational
- lasted 18d 21h
- started 2026-10-22 20:08 UTC
- Customer Security Advisory
- id: DWN-aef24409d4
- Official page: https://stspg.io/5rycfjp1rrgf

## Updates from Akamai Cloud (Linode)
### 2026-10-22 20:08 UTC: investigating
Akamai is aware of the recently published F5/NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479), and our teams are actively investigating their potential impact across our platform and infrastructure.
F5 has released out-of-band security patches addressing three critical severity vulnerabilities in NGINX Open Source and NGINX Plus. These vulnerabilities may allow unauthenticated attackers to trigger heap buffer overflows, which could cause a denial of service or potential remote code execution if ASLR is bypassed.
If you are running a vulnerable version of NGINX Open Source or NGINX Plus on a Linode instance, we recommend following guidance from F5/NGINX and applying available patches.
We will provide updates as additional information becomes available.

### 2026-11-10 17:59 UTC: resolved
Akamai has completed its investigation of the recently published F5/NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479). We have not identified any impact to Akamai’s platform or infrastructure.
If you run a vulnerable version of NGINX Open Source or NGINX Plus on a Linode instance, follow F5/NGINX guidance and apply the available patches. No further updates are planned for this notice.

From the builder: does your app depend on Akamai Cloud (Linode)? [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=linode) detects problems in your own logs without hand-written monitors, and you can ask it in plain language which errors mention Akamai Cloud (Linode).

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=DWN-aef24409d4), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.