CVE-2026-91184 | F5 NGINX Gateway Fabric up to 2.7.x AuthenticationFilter nginx.conf realm code injection

October 14, 2026 Yanac

A vulnerability classified as problematic was found in F5 NGINX Gateway Fabric up to 2.7.x. Impacted is an unknown function of the file nginx.conf of the component AuthenticationFilter. Such manipulation of the argument realm leads to code injection.

This vulnerability is referenced as CVE-2026-91184. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More