Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
On June 17, 2026, F5 released emergency patches for two critical vulnerabilities in NGINX, CVE-2026-42530 and CVE-2026-42055. These vulnerabilities affect NGINX Open Source, NGINX Plus, and related products, allowing unauthenticated remote attackers to execute arbitrary code and cause denial-of-serv...
On June 17, 2026, multiple critical vulnerabilities (CVE-2026-42055, CVE-2026-42530, CVE-2026-48142) affecting Fedora's Nginx modules were disclosed. These vulnerabilities allow for potential remote code execution and denial-of-service attacks. The affected modules include nginx-mod-fancyindex, ngin...
Recent updates for openSUSE NGINX address multiple vulnerabilities, including CVE-2026-42055, a heap-based buffer overflow affecting the ngx_http_proxy_v2_module and ngx_http_grpc_module, and CVE-2026-48142, a heap buffer over-read in the ngx_http_charset_module. Additionally, CVE-2026-40460 allows...
Recent advisories detail multiple vulnerabilities in Nginx across Oracle Linux versions 8, 9, and 10, including CVE-2026-60005 and CVE-2026-56434, which could lead to memory disclosure and denial of service. These vulnerabilities are particularly concerning as they allow for remote denial of service...
