F5 releases out-of-band patches for critical NGINX vulnerabilities

F5 has released emergency out-of-band patches for three critical vulnerabilities in NGINX, including heap-based buffer overflows and use-after-free conditions that could enable remote code execution or denial-of-service attacks. Out-of-band releases signal the severity is too high to wait for a regular patch cycle, meaning organizations running NGINX must act immediately rather than on routine schedules. F5 products have historically been high-value targets for threat actors, making unpatched instances an attractive entry point into enterprise networks. The window between public disclosure and active exploitation is shrinking, so delays in applying critical patches — even of days — can be catastrophic.