# Akamai Cloud (Linode): Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities

> Akamai Cloud (Linode) reports a security advisory for F5/NGINX vulnerabilities CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479. Akamai Cloud (Linode) is investigating the possible impact on its platform and infrastructure. Akamai Cloud (Linode) states that users who run a vulnerable version of NGINX Open Source or NGINX Plus on a Linode instance can apply the patches from F5/NGINX.

- Provider: [Akamai Cloud (Linode)](https://outages.live/linode.md)
- Type: Incident
- State: investigating
- Worst impact: Operational
- Started: 2026-10-22 20:08 UTC
- Official update: https://stspg.io/5rycfjp1rrgf

## Updates from Akamai Cloud (Linode)

### investigating, 2026-11-01 08:39 UTC

Akamai is aware of the recently published F5/NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479), and our teams are actively investigating their potential impact across our platform and infrastructure. F5 has released out-of-band security patches addressing three critical severity vulnerabilities in NGINX Open Source and NGINX Plus. These vulnerabilities may allow unauthenticated attackers to trigger heap buffer overflows, which could cause a denial of service or potential remote code execution if ASLR is bypassed. If you are running a vulnerable version of NGINX Open Source or NGINX Plus on a Linode instance, we recommend following guidance from F5/NGINX and applying available patches. We will provide updates as additional information becomes available.