Multiples vulnérabilités dans les produits F5

{
  "id": "75b782f9cdaa26a1feaf137317c58845e54f273c0aac558e35c6fd4c82d1b659",
  "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1341/",
  "method": "llm",
  "payload": {
    "kind": "advisory",
    "title": "Multiples vulnérabilités dans les produits F5",
    "summary": "F5 products have multiple vulnerabilities that may allow remote code execution, denial of service, or data confidentiality impact. Consult the vendor bulletins for fixes.",
    "evidence": "Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.",
    "products": [
      {
        "name": {
          "value": "F5 DoS for NGINX",
          "evidence": "F5 DoS for NGINX versions 4.x antérieures à 4.11.0"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions 4.x antérieures à 4.11.0",
            "evidence": "F5 DoS for NGINX versions 4.x antérieures à 4.11.0"
          }
        ]
      },
      {
        "name": {
          "value": "F5 WAF for NGINX",
          "evidence": "F5 WAF for NGINX versions 5.x antérieures à 5.14.2 et 5.16.0"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions 5.x antérieures à 5.14.2 et 5.16.0",
            "evidence": "F5 WAF for NGINX versions 5.x antérieures à 5.14.2 et 5.16.0"
          }
        ]
      },
      {
        "name": {
          "value": "NGINX App Protect DoS",
          "evidence": "NGINX App Protect DoS versions 4.x"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions 4.x",
            "evidence": "NGINX App Protect DoS versions 4.x"
          }
        ]
      },
      {
        "name": {
          "value": "NGINX App Protect WAF",
          "evidence": "NGINX App Protect WAF versions 4.x"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions 4.x",
            "evidence": "NGINX App Protect WAF versions 4.x"
          }
        ]
      },
      {
        "name": {
          "value": "NGINX App Protect WAF",
          "evidence": "NGINX App Protect WAF versions 5.x"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions 5.x",
            "evidence": "NGINX App Protect WAF versions 5.x"
          }
        ]
      },
      {
        "name": {
          "value": "NGINX Gateway Fabric",
          "evidence": "NGINX Gateway Fabric versions antérieures à 2.8.0"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions antérieures à 2.8.0",
            "evidence": "NGINX Gateway Fabric versions antérieures à 2.8.0"
          }
        ]
      },
      {
        "name": {
          "value": "NGINX Ingress Controller",
          "evidence": "NGINX Ingress Controller versions 2026-lts-r3 - 2026-lts-r8"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions 2026-lts-r3 - 2026-lts-r8",
            "evidence": "NGINX Ingress Controller versions 2026-lts-r3 - 2026-lts-r8"
          }
        ]
      },
      {
        "name": {
          "value": "NGINX Ingress Controller",
          "evidence": "NGINX Ingress Controller versions antérieures à 5.7.0"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions antérieures à 5.7.0",
            "evidence": "NGINX Ingress Controller versions antérieures à 5.7.0"
          }
        ]
      },
      {
        "name": {
          "value": "NGINX Instance Manager",
          "evidence": "NGINX Instance Manager versions 2.x antérieures à 2.24.0"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions 2.x antérieures à 2.24.0",
            "evidence": "NGINX Instance Manager versions 2.x antérieures à 2.24.0"
          }
        ]
      },
      {
        "name": {
          "value": "NGINX Javascript",
          "evidence": "NGINX Javascript antérieures à 1.0.2"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "antérieures à 1.0.2",
            "evidence": "NGINX Javascript antérieures à 1.0.2"
          }
        ]
      },
      {
        "name": {
          "value": "NGINX Open Source",
          "evidence": "NGINX Open Source versions 1.31.x antérieures à 1.31.7"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions 1.31.x antérieures à 1.31.7",
            "evidence": "NGINX Open Source versions 1.31.x antérieures à 1.31.7"
          }
        ]
      },
      {
        "name": {
          "value": "NGINX Open Source",
          "evidence": "NGINX Open Source versions antérieures à 1.30.6"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions antérieures à 1.30.6",
            "evidence": "NGINX Open Source versions antérieures à 1.30.6"
          }
        ]
      },
      {
        "name": {
          "value": "NGINX Plus",
          "evidence": "NGINX Plus versions antérieures à 37.1.0.1 et 37.0.5.1"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions antérieures à 37.1.0.1 et 37.0.5.1",
            "evidence": "NGINX Plus versions antérieures à 37.1.0.1 et 37.0.5.1"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-101019",
        "evidence": "Référence CVE CVE-2026-101019"
      },
      {
        "value": "CVE-2026-101025",
        "evidence": "Référence CVE CVE-2026-101025"
      },
      {
        "value": "CVE-2026-104939",
        "evidence": "Référence CVE CVE-2026-104939"
      },
      {
        "value": "CVE-2026-15176",
        "evidence": "Référence CVE CVE-2026-15176"
      },
      {
        "value": "CVE-2026-91184",
        "evidence": "Référence CVE CVE-2026-91184"
      },
      {
        "value": "CVE-2026-93479",
        "evidence": "Référence CVE CVE-2026-93479"
      },
      {
        "value": "CVE-2026-94197",
        "evidence": "Référence CVE CVE-2026-94197"
      },
      {
        "value": "CVE-2026-95101",
        "evidence": "Référence CVE CVE-2026-95101"
      },
      {
        "value": "CVE-2026-96615",
        "evidence": "Référence CVE CVE-2026-96615"
      },
      {
        "value": "CVE-2026-97205",
        "evidence": "Référence CVE CVE-2026-97205"
      },
      {
        "value": "CVE-2026-97629",
        "evidence": "Référence CVE CVE-2026-97629"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-cert-fr-advisories",
  "document_id": 23327,
  "published_at": "2026-10-19T00:00:00+00:00"
}