--- title: "F5 lands Telenor's sovereign AI contract, then patches three 9.2-severity NGINX flaws" description: "In one week, Telenor made F5 the service plane of its Nvidia-powered sovereign cloud and F5 rush-patched three 9.2-severity NGINX flaws, on top of a nation-state breach record. The company selling the trust layer of AI clouds keeps supplying evidence against its own premium." publisher: "The Inference" section: "Security" published: 2026-10-21T17:04:11.622Z modified: 2026-10-21T17:04:11.622Z canonical: https://theinference.org/article/f5-lands-telenor-s-sovereign-ai-contract-then-patches-three-9-2-severity-nginx-flaws language: en keywords: "F5, Telenor, NGINX, Sovereign AI, Cybersecurity, Indosat" --- # F5 lands Telenor's sovereign AI contract, then patches three 9.2-severity NGINX flaws > In one week, Telenor made F5 the service plane of its Nvidia-powered sovereign cloud and F5 rush-patched three 9.2-severity NGINX flaws, on top of a nation-state breach record. The company selling the trust layer of AI clouds keeps supplying evidence against its own premium. On October 21, Norway's Telenor [named F5 the AI service plane of its sovereign cloud](https://www.marketscreener.com/news/telenor-ai-factory-selects-f5-inc-big-ip-next-for-kubernetes-as-an-intelligent-ai-service-plane-fo-ce785cd8d08ff423): BIG-IP Next for Kubernetes, running on [Nvidia](https://theinference.org/markets/companies/nvidia) BlueField-3 DPUs, sits in the data path of Telenor AI Factory to enforce tenant isolation, policy and traffic control, with token-aware governance planned for entitlement and billing workflows [2]. The day before, [Indosat's Intelligence Suite in Indonesia put F5 in the same seat](https://www.marketscreener.com/news/indosat-and-f5-launch-a-intelligence-suitea-a-token-factory-to-unlock-ai-across-asia-ce785ddcd88bf724): one governed layer over more than 300 AI models, with [F5](https://theinference.org/markets/companies/f5)'s technology metering, routing and logging what enterprises consume [3][4][5]. The same week, F5 [shipped out-of-band emergency patches](https://www.csoonline.com/article/4237420/f5-rushes-out-emergency-nginx-patches-for-three-critical-flaws.html) for three NGINX flaws rated 9.2 in CVSS v4, CVE-2026-15176, CVE-2026-97205 and CVE-2026-93479, each able to crash servers, execute code or take services down [1]. ## The lock and the rap sheet belong to the same product The complication is that these are not separate businesses. NGINX is the reverse proxy and load balancer where transport layer security terminates, so code execution there means seeing passwords, session cookies, API tokens and private keys in the clear, as Frank Dickson of Dickson Research put it [1]. And the record is not clean. Over five years, CISA has flagged eight actively-exploited F5 vulnerabilities, four used in ransomware; [a 2025 nation-state breach of BIG-IP drew Emergency Directive 26-01](https://theinference.org/article/f5-s-authentication-appliance-is-under-active-attack-and-shares-are-up-75-anyway) [1]. May's NGINX Rift bug shipped with a public proof of concept [1]. NGINX hides inside ingress controllers, appliances and Linux distributions that patch on their own clocks, so a fix on F5's site does not patch the servers [1]. *Chart: **F5 revenue, eight straight quarters, now 865 million dollars a quarter** Line chart of F5 quarterly revenue from Q3 2024 through Q2 2026, rising from 747 to 865 million dollars.* *F5 revenue, eight straight quarters, now 865 million dollars a quarter [6]* ## The growth engine is real, and so is the clock The receipts say the revenue is real. [F5's quarterly sales have climbed from $746.7 million to $865.1 million over eight quarters](https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001048695), growing 10.9% year over year in the latest, with 80% of the Fortune 500 already among its customers [1][6]. Sovereign AI adds a new buyer: governments that want data kept in-country, from Oslo to Jakarta, and are willing to pay for a governed front door. The strongest counterpoint: none of this week's flaws are known to be exploited, and they need specific configurations to bite [1]. Fair. But a company selling the meter and the lock of sovereign AI clouds has now disclosed critical front-door flaws in May, June and October of one year [1]. F5 reports earnings on October 27 [5]. Watch what it says about AI revenue, and watch whether the patch cadence holds. No source dates which arrives first, the sovereign-AI revenue or the next breach. The seven days just ran both races at once. ## Takeaway F5 booked the sovereign-AI wins it has been promising, from Telenor's Nvidia-powered cloud to Indosat's 300-model suite, in the same week it rush-patched three 9.2-severity NGINX flaws, on a record that already includes eight CISA-flagged exploited vulnerabilities and a nation-state breach. Revenue is real and rising; the trust premium it sells is running against its own patch cadence. Watch the October 27 earnings call. ## Sources 1. [CSO Online, "F5 rushes out emergency NGINX patches for three critical flaws", collected 21 October 2026](https://www.csoonline.com/article/4237420/f5-rushes-out-emergency-nginx-patches-for-three-critical-flaws.html) 2. [MarketScreener, "Telenor AI Factory Selects F5 BIG-IP Next for Kubernetes as Intelligent AI Service Plane for NVIDIA-Powered Sovereign AI Infrastructure", 21 October 2026](https://www.marketscreener.com/news/telenor-ai-factory-selects-f5-inc-big-ip-next-for-kubernetes-as-an-intelligent-ai-service-plane-fo-ce785cd8d08ff423) 3. [Fierce Network, "Indosat taps F5 to turn enterprise AI sprawl into a single service", 20 October 2026](https://www.fierce-network.com/cloud/indosat-taps-f5-turn-enterprise-ai-sprawl-single-service) 4. [Developing Telecoms, "Indosat and F5 launch AI services suite for Southeast Asian enterprises", 12 October 2026](https://developingtelecoms.com/telecom-technology/enterprise-ecosystems/20948-indosat-and-f5-launch-ai-services-suite-for-southeast-asian-enterprises.html) 5. [MarketScreener carrying F5 press release, "Indosat and F5 Launch 'Intelligence Suite': A Token Factory to Unlock AI Across Asia", 9 October 2026](https://www.marketscreener.com/news/indosat-and-f5-launch-a-intelligence-suitea-a-token-factory-to-unlock-ai-across-asia-ce785ddcd88bf724) 6. [F5 quarterly figures from its SEC filings, retrieved 21 October 2026](https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001048695) --- F5 lands Telenor's sovereign AI contract, then patches three 9.2-severity NGINX flaws — The Inference. Canonical: https://theinference.org/article/f5-lands-telenor-s-sovereign-ai-contract-then-patches-three-9-2-severity-nginx-flaws