Ref# ADV2026_185 | Date: Mar 25th 2026

---

F5 published a security advisory highlighting vulnerabilities in the following products on March 24, 2026. It is recommended that you take the necessary precautions by ensuring your products are always updated. 

• NGINX Plus – versions R32 to R36 

• NGINX Open Source – versions 1.0.0 to 1.29.6 and 0.5.13 to 0.9.7 

For more information on this update, you can follow this URL: 

• K000160336: Out-of-band Security Notification (March 24, 2026) 

The Guyana National CIRT recommends that users and administrators review this update and apply it where necessary. 

PDF Download: F5 Security Advisory

References 

• F5 Security Advisory (March 24th, 2026). Retrieved from F5. https://my.f5.com/manage/s/article/K000160336 

• F5 Security Advisory. (March 24th, 2026). Retrieved from Canadian Centre for Cyber Security. https://cyber.gc.ca/en/alerts-advisories/f5-security-advisory-av26-273