F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-18 17:32 UTC
  • Importiert: 2026-06-26 16:28 UTC
  • CVSS: 9.2
  • Quelle-ID: thn_global
  • uid_hash: 8cfebd1b52b0e78f9b33fa87d9f0a8f89b4a3bfdaeda5bc62797593ad52aca32

Inhalt

F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve code execution on affected systems.

The vulnerabilities are listed below -

CVE-2026-42530 (CVSS v4 score: 9.2) - A use-after-free vulnerability in the ngx_http_v3_module that could be triggered by a remote unauthenticated attacker when NGINX Open Source is

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-42530

CRITICAL

9.2

CRITICAL

9.2

2026-06-17

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews