NGINX Open Source

Reported Context (6)

for multiple NGINX software products affected by these two vulnerabilities, including NGINX Plus, NGINX Open Source, NGINX Ingress Controller, NGINX Gateway Fabric, and NGINX Instance Manager. F5 Releases Out-of-Band Patches for Critical NGINX Vulnerabilities
The most severe flaw is CVE-2026-42533 (CVSS score of 9.2), a critical issue in NGINX Plus and NGINX Open Source that could be exploited via crafted HTTP requests to cause a heap buffer overflow and restart the NGINX F5 Patches Eight NGINX and BIG-IP Vulnerabilities
F5 has released patches for two critical NGINX Open Source vulnerabilities, CVE-2026-42530 and CVE-2026-42055, that could allow remote unauthenticated attackers to execute code under certain configurations. F5 Patches Two Critical NGINX Flaws That Could Enable Remote Code Execution
F5 has released security fixes for multiple NGINX software products affected by these two vulnerabilities, including NGINX Plus and NGINX Open Source, NGINX Gateway Fabric, and NGINX Instance Manager. F5 Issues Out-of-Band Patches for Critical NGINX Vulnerabilities
NGINX Open Source versions 0.6.27 through 1.30.0 18-Year-Old NGINX Flaw Can Cause DoS, With RCE Demonstrated Under Specific Conditions

CVE (12)

People (1)

MITRE ATT&CK (3)

Vendors (1)

Products (10)

Industries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.