F5 and Juniper Networks have released patches to address multiple critical vulnerabilities that could allow remote code execution and compromise of their devices. F5 has announced fixes for 11 security defects in its NGINX product, with critical vulnerabilities identified as CVE-2026-15176 and CVE-2026-93479. These bugs could be exploited without authentication using specially crafted HTTP requests, potentially leading to a buffer overflow and system restart. If Address Space Layout Randomization (ASLR) is disabled or bypassed, attackers could execute remote code. Another significant issue, CVE-2026-97205, may cause memory corruption or termination of the worker process, and also lead to remote code execution if ASLR is not active.

Additionally, Juniper Networks published 17 advisories covering over 150 security defects in Junos OS, Junos OS Evolved, and Juniper Cloud-Native Router. Among these, approximately two dozen are critical, allowing for code execution with root privileges, complete device takeover, and other severe impacts like kernel panic and service disruption. The company has also addressed several high-severity vulnerabilities that could result in remote code execution and denial-of-service attacks.

Both F5 and Juniper Networks have not reported any active exploitation of these vulnerabilities in the wild. However, given their severity, it is crucial for users to apply the patches promptly to mitigate potential risks and protect their systems from possible attacks.