CVE-2026-40460

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

July 20, 2026

Last Seen

July 26, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

F5 Issues Critical Patches for NGINX Vulnerabilities Allowing Remote Code Execution80.0

On June 17, 2026, F5 released emergency patches for two critical vulnerabilities in NGINX, CVE-2026-42530 and CVE-2026-42055. These vulnerabilities affect NGINX Open Source, NGINX Plus, and related products, allowing unauthenticated remote attackers to execute arbitrary code and cause denial-of-serv...

Critical NGINX Vulnerability CVE-2026-42533 Poses RCE and DoS Risks74.0

F5 disclosed a critical vulnerability in NGINX, identified as CVE-2026-42533, which can lead to remote code execution (RCE) and denial-of-service (DoS) attacks. The flaw is a heap buffer overflow triggered by crafted HTTP requests that exploit unsafe regex processing in the map directive. This vulne...

Critical Vulnerabilities in openSUSE NGINX Require Immediate Attention72.0

Recent updates for openSUSE NGINX address multiple vulnerabilities, including CVE-2026-42055, a heap-based buffer overflow affecting the ngx_http_proxy_v2_module and ngx_http_grpc_module, and CVE-2026-48142, a heap buffer over-read in the ngx_http_charset_module. Additionally, CVE-2026-40460 allows...