CVE-2026-28755

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

July 20, 2026

Last Seen

July 20, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

F5 Issues Critical Patches for NGINX Vulnerabilities Allowing Remote Code Execution80.0

On June 17, 2026, F5 released emergency patches for two critical vulnerabilities in NGINX, CVE-2026-42530 and CVE-2026-42055. These vulnerabilities affect NGINX Open Source, NGINX Plus, and related products, allowing unauthenticated remote attackers to execute arbitrary code and cause denial-of-serv...

Critical NGINX Vulnerability CVE-2026-42533 Poses RCE and DoS Risks74.0

F5 disclosed a critical vulnerability in NGINX, identified as CVE-2026-42533, which can lead to remote code execution (RCE) and denial-of-service (DoS) attacks. The flaw is a heap buffer overflow triggered by crafted HTTP requests that exploit unsafe regex processing in the map directive. This vulne...