CVE-2026-42533
Vulnerability in F5 Nginx Plus
CVSS score
8.1
EPSS probability
%0.9
Risk score
0.1
Published
3 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a specific configuration to exploit. A fourth lets an attacker forge a TLS session that could
Similar Vulnerabilities
9.0
CVE-2021-40438 Actively exploitedmod_proxy SSRF
Patch verified Public Exploits:11EPSS %100
7.8
8.2
CVE-2026-27654Buffer overflow in F5 Nginx Plus
Patch verifiedEPSS %25
7.5
CVE-2002-20001Uncontrolled resource consumption in Balasys Dheater
Patch status unknown Public Exploits:3EPSS %25
8.1
CVE-2026-42055NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability
Patch verified Public Exploits:1EPSS %7
9.8
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-42533"