Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 (stable) and 1.31.3 (mainline), and in NGINX Plus 37.0.3.1; anyone on an earlier build should upgrade.

Triggering it can crash or restart the worker, causing a denial of

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

U.S. sanctions against the A/I Collective

U.S. sanctions against the A/I Collective Source: Hacker News

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 21.06.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 69 requests (recent log) 216.73.217.60 — 25 requests (recent log) 93.158.213.25 — 18 requests (recent

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 27.07.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 900 requests (recent log) 146.70.40.68 — 219 requests (recent log) 216.73.216.86 — 207 requests (recent

Read More