CVE-2026-101019 | F5 NGINX JavaScript up to 1.0.1 XML module $attr$Name/$attrs signature verification

October 14, 2026 Yanac

A vulnerability categorized as critical has been discovered in F5 NGINX JavaScript up to 1.0.1. Affected is the function $attr$Name/$attrs of the component XML module. Such manipulation leads to improper verification of cryptographic signature.

This vulnerability is traded as CVE-2026-101019. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More