Search: CVE-2026-11311

CVE-2026-11311 is an injection vulnerability in the NGINX configuration generator component of F5's NGINX Gateway Fabric version 2.5.0. Authenticated users with permission to create or modify certain Custom Resource Definitions can inject arbitrary NGINX configuration directives via unsanitized fields. There is no direct data plane exposure from this vulnerability. No official patch or remediation guidance is currently provided.