Vulnerabilitycritical
F5 Patches Critical NGINX Vulnerabilities Enabling Unauthenticated Code Execution
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-42530+2 related CVEs | NGINX Open Source has a vulnerability in the ngx_http_v3_module module | 9.2 group max | 6% | PoC | |
| CVE-2026-42055 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules | 9.2 | 7% |
From the original article
2 min read at securityaffairs.com
F5 released emergency updates for critical NGINX flaws (CVE-2026-42530, CVE-2026-42055) that could enable unauthenticated code execution. F5 has issued out-of-band patches for multiple NGINX vulnerabilities , including two critical flaws, respectively tracked as CVE-2026-42530 and CVE-2026-42055 (CVSS 9. 2).
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.