CVE-2026-18329 | F5 NGINX JavaScript up to 1.0.0 js_access authorization

September 2, 2026 Yanac

A vulnerability, which was classified as critical, was found in F5 NGINX JavaScript up to 1.0.0. Affected by this issue is some unknown functionality of the component js_access. The manipulation results in authorization bypass.

This vulnerability is known as CVE-2026-18329. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More