CVE-2026-42945

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 13, 2026

Last Seen

October 15, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

F5 Issues Critical Patches for NGINX Vulnerabilities Allowing Remote Code Execution80.0

On June 17, 2026, F5 released emergency patches for two critical vulnerabilities in NGINX, CVE-2026-42530 and CVE-2026-42055. These vulnerabilities affect NGINX Open Source, NGINX Plus, and related products, allowing unauthenticated remote attackers to execute arbitrary code and cause denial-of-serv...

Critical NGINX Vulnerability CVE-2026-42945 Exposes Millions to RCE and DoS Attacks78.8

A critical vulnerability, CVE-2026-42945, has been discovered in the NGINX web server's ngx_http_rewrite_module, allowing unauthenticated attackers to execute remote code or crash servers. This heap-based buffer overflow has existed for 18 years, affecting all versions from 0.6.27 to 1.30.0. Attacke...

Critical Code Execution Vulnerabilities in Oracle Linux nginx72.8

Oracle Linux versions 8 and 9 have been found vulnerable to multiple critical code execution and denial of service vulnerabilities in nginx. The vulnerabilities include CVE-2026-42945, which allows arbitrary code execution, and CVE-2026-9256, which enables denial of service through specially crafted...

Multiple nginx Vulnerabilities Discovered in Ubuntu Security Advisory70.5

On June 3, 2026, Ubuntu published a security advisory detailing multiple vulnerabilities in nginx affecting various Ubuntu LTS versions. Key issues include improper handling of memory operations in the ngx_mail_smtp_module (CVE-2025-53859), which could leak sensitive information, and flaws in the ng...