CVE-2026-42945

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 13, 2026

Last Seen

August 27, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

F5 Issues Critical Patches for NGINX Vulnerabilities Allowing Remote Code Execution80.0

On June 17, 2026, F5 released emergency patches for two critical vulnerabilities in NGINX, CVE-2026-42530 and CVE-2026-42055. These vulnerabilities affect NGINX Open Source, NGINX Plus, and related products, allowing unauthenticated remote attackers to execute arbitrary code and cause denial-of-serv...

Critical NGINX Vulnerability CVE-2026-42945 Exposes Millions to RCE and DoS Attacks78.8

A critical vulnerability, CVE-2026-42945, has been discovered in the NGINX web server's ngx_http_rewrite_module, allowing unauthenticated attackers to execute remote code or crash servers. This heap-based buffer overflow has existed for 18 years, affecting all versions from 0.6.27 to 1.30.0. Attacke...

Critical NGINX Vulnerability CVE-2026-42533 Poses RCE and DoS Risks74.0

F5 disclosed a critical vulnerability in NGINX, identified as CVE-2026-42533, which can lead to remote code execution (RCE) and denial-of-service (DoS) attacks. The flaw is a heap buffer overflow triggered by crafted HTTP requests that exploit unsafe regex processing in the map directive. This vulne...

Critical Code Execution Vulnerabilities in Oracle Linux nginx72.8

Oracle Linux versions 8 and 9 have been found vulnerable to multiple critical code execution and denial of service vulnerabilities in nginx. The vulnerabilities include CVE-2026-42945, which allows arbitrary code execution, and CVE-2026-9256, which enables denial of service through specially crafted...