F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-42055 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules | 9.2 | 7% | ||
| CVE-2026-42530 | NGINX Open Source has a vulnerability in the ngx_http_v3_module module | 9.2 | 6% | PoC | |
| CVE-2026-42945 | Heap Buffer Overflow in NGINX Plus & Open Source rewrite module — DoS, potential RCE | 9.2 | 68% | PoC ×6 |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Jun 18, 2026 Vulnerability / Cloud Security F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve code execution on affected systems. CVE-2026-42530 (CVSS v4 score: 9.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.