# Akamai Cloud (Linode): Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities

> Akamai Cloud (Linode) reports a security advisory for F5/NGINX vulnerabilities that affect NGINX Open Source and NGINX Plus on Linode instances. Akamai Cloud (Linode) is investigating the possible impact on its platform and infrastructure. F5 released patches, and Akamai Cloud (Linode) advises users of vulnerable NGINX versions to apply them.

- Provider: [Akamai Cloud (Linode)](https://outages.cc/linode.md)
- Type: Incident
- State: investigating
- Worst impact: Major outage
- Started: 2026-10-22 20:08 UTC
- Official update: https://stspg.io/5rycfjp1rrgf

## Updates from Akamai Cloud (Linode)

### investigating, 2026-11-02 02:42 UTC

Akamai is aware of the recently published F5/NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479), and our teams are actively investigating their potential impact across our platform and infrastructure. F5 has released out-of-band security patches addressing three critical severity vulnerabilities in NGINX Open Source and NGINX Plus. These vulnerabilities may allow unauthenticated attackers to trigger heap buffer overflows, which could cause a denial of service or potential remote code execution if ASLR is bypassed. If you are running a vulnerable version of NGINX Open Source or NGINX Plus on a Linode instance, we recommend following guidance from F5/NGINX and applying available patches. We will provide updates as additional information becomes available.

### investigating, 2026-10-31 21:45 UTC

Akamai is aware of the recently published F5/NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479), and our teams are actively investigating their potential impact across our platform and infrastructure. F5 has released out-of-band security patches addressing three critical severity vulnerabilities in NGINX Open Source and NGINX Plus. These vulnerabilities may allow unauthenticated attackers to trigger heap buffer overflows, which could cause a denial of service or potential remote code execution if ASLR is bypassed. If you are running a vulnerable version of NGINX Open Source or NGINX Plus on a Linode instance, we recommend following guidance from F5/NGINX and applying available patches. We will provide updates as additional information becomes available.