# Linode (Akamai): Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities

> Linode (Akamai) status incident “Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities” on 2026-10-22: impact none (vendor’s label), 1 update(s). Archived by Rewindex.

Canonical: https://rewindex.com/company/linode-akamai/incidents/8dqqkh4d9y2c
Last updated: 2026-10-26T03:14:36Z

- Impact (vendor’s label): none
- Status: investigating
- Started: 2026-10-22 20:08 UTC · Resolved: not resolved · Duration: ongoing
- Updates: 1
- [Vendor status page: https://status.linode.com/incidents/8dqqkh4d9y2c](https://status.linode.com/incidents/8dqqkh4d9y2c)
- [Company: Linode (Akamai)](https://rewindex.com/company/linode-akamai.md)

## CVEs mentioned

- [CVE-2026-15176](https://rewindex.com/cve/CVE-2026-15176.md) NGINX ngx\_http\_core\_module vulnerability (CVSS 8.1 high): names this CVE
- [CVE-2026-93479](https://rewindex.com/cve/CVE-2026-93479.md) NGINX map directive and regex matching vulnerability (CVSS 8.1 high): names this CVE
- [CVE-2026-97205](https://rewindex.com/cve/CVE-2026-97205.md) NGINX ngx\_http\_core\_module vulnerability (CVSS 8.1 high): names this CVE

_Only CVEs the incident text names by id, or that the notice says the vendor is not affected by. Not a statement of cause._

## Timeline of updates

- **investigating** 2026-10-22 20:08 UTC: Akamai is aware of the recently published F5/NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479), and our teams are actively investigating their potential impact across our platform and infrastructure. F5 has released out-of-band security patches addressing three critical severity vulnerabilities in NGINX Open Source and NGINX Plus. These vulnerabilities may allow unauthenticated attackers to trigger heap buffer overflows, which could cause a denial of service or potential remote code execution if ASLR is bypassed. If you are running a vulnerable version of NGINX Open Source or NGINX Plus on a Linode instance, we recommend following guidance from F5/NGINX and applying available patches. We will provide updates as additional information becomes available.


---
Canonical: https://rewindex.com/company/linode-akamai/incidents/8dqqkh4d9y2c · Markdown: https://rewindex.com/company/linode-akamai/incidents/8dqqkh4d9y2c.md · JSON: https://rewindex.com/api/v1/companies/linode-akamai/incidents/8dqqkh4d9y2c · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:14:36.758Z