{"vulnerability": "CVE-2026-42533", "sightings": [{"uuid": "d98b3ea7-cddc-408a-a99d-387cbe148466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mrxkbvhjsg23", "content": "F5 Patches CVE-2026-42533: Heap Buffer Overflow in NGINX Script Engine", "creation_timestamp": "2026-07-31T18:07:29.153766Z"}, {"uuid": "ecfd9693-7c7a-4e8f-b47e-544db97ba3ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/angie_software/176", "content": "\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Angie \u0438 Angie PRO 1.12.1 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u043d\u0435\u0435 \u0432 nginx.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0438\u0437 \n\u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0435 \"map\" (CVE-2026-42533 \u0438 CVE-2026-60005), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0434\u0443\u043b\u044f SSI (CVE-2026-56434).\n\n\u0415\u0449\u0451 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043c\u0435\u0442\u0440\u0438\u043a (Metric) \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0435 \u043f\u043e \u043d\u0430\u0438\u043c\u0435\u043d\u044c\u0448\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043e\u0442\u0432\u0435\u0442\u0430 (least_time).\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Angie \u0438 Angie PRO.\n\nP.S.\n\u0421\u043f\u0430\u0441\u0438\u0431\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0443, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u0430\u043b\u0438 \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 \u043c\u0435\u0442\u0440\u0438\u043a. \n\u0412\u044b \u2014 \u043b\u0443\u0447\u0448\u0438\u0435! \ud83e\udd70", "creation_timestamp": "2026-08-29T18:00:05.222968Z"}, {"uuid": "ab2eef8e-dd05-4a29-ab46-ea0c0f9adc33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/93z-LIlEULZWbnwEzYtTEAqd1z1QFNuHcbWGMZMdxRz5WQ4", "content": "", "creation_timestamp": "2026-08-08T00:06:20.473766Z"}, {"uuid": "1b686b75-1844-42ea-be56-1248b2186ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "Telegram/zAJ5TWBIUoS-Z2Q79eIMtdFrdAnvwlKVqfHngA-3uEfDl5Y", "content": "", "creation_timestamp": "2026-08-08T00:08:31.530547Z"}, {"uuid": "377fa1f4-ffd0-40ae-9480-204178e4b353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/pphm_HackerNews/2158", "content": "\ud83d\udd34 CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\n\nF5 fixes critical nginx flaw CVE-2026-42533 that can crash servers and, in some cases, allow remote code execution through crafted HTTP requests.\n\nF5 released patches for a critical nginx vulnerability, tracked as CVE-2026-42533 (CVSS score of 9.2), that can allow an unauthenticated attacker to trigger a heap buffer overflow using specially crafted HTTP requests.\n\n\u201cheap buffer overflow might occur in a worker process when using the map directive with regex matching if the map variable was included in a string expression after a capture affected by this map; a similar issue might happen when using a non-cacheable variable in a string expression (CVE-2026-42533).\u201d reads the advisory.", "creation_timestamp": "2026-08-21T23:00:08.345607Z"}, {"uuid": "bd1a69b9-0467-41da-9a7b-c7ad97f4468b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96807", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xCyberstan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 18:23:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-42533: pre-auth nginx heap overflow and info leak from PCRE capture clobbering in the map/script engine, chained to RCE.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T21:00:05.193451Z"}, {"uuid": "8f85a474-12ac-4ddb-a0e9-abb5dce43eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96807", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xCyberstan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 18:23:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-42533: pre-auth nginx heap overflow and info leak from PCRE capture clobbering in the map/script engine, chained to RCE.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T00:00:24.105398Z"}, {"uuid": "432948b1-edd3-4a1a-b8cc-2f14625dd4e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/pphm_HackerNews/2158", "content": "\ud83d\udd34 CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\n\nF5 fixes critical nginx flaw CVE-2026-42533 that can crash servers and, in some cases, allow remote code execution through crafted HTTP requests.\n\nF5 released patches for a critical nginx vulnerability, tracked as CVE-2026-42533 (CVSS score of 9.2), that can allow an unauthenticated attacker to trigger a heap buffer overflow using specially crafted HTTP requests.\n\n\u201cheap buffer overflow might occur in a worker process when using the map directive with regex matching if the map variable was included in a string expression after a capture affected by this map; a similar issue might happen when using a non-cacheable variable in a string expression (CVE-2026-42533).\u201d reads the advisory.", "creation_timestamp": "2026-08-22T00:00:11.931451Z"}, {"uuid": "537011e4-9918-42da-888b-d8b5952e8a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/zAJ5TWBIUoS-Z2Q79eIMtdFrdAnvwlKVqfHngA-3uEfDl5Y", "content": "", "creation_timestamp": "2026-08-07T10:17:15.136149Z"}, {"uuid": "cc950274-0c0a-46dc-bb50-dcfc3a5aec10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/93z-LIlEULZWbnwEzYtTEAqd1z1QFNuHcbWGMZMdxRz5WQ4", "content": "", "creation_timestamp": "2026-08-07T10:17:15.436940Z"}, {"uuid": "2734ae7d-fbc2-4187-b30b-92d16fcbe100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://gist.github.com/alon710/655c244f0d667e1d7ba0e5f0781413ad", "content": "# CVE-2026-42533: CVE-2026-42533: NGINX Map Directive and Regex Matching Pre-Auth Heap Buffer Overflow & Info Leak\n\n> **CVSS Score:** 9.2\n> **Published:** 2026-07-15\n> **Full Report:** https://cvereports.com/reports/CVE-2026-42533\n\n## Summary\nCVE-2026-42533 is a critical security vulnerability discovered in NGINX Open Source, NGINX Plus, NGINX Ingress Controller, and related products, referred to as the 'Two-Pass Capture-Clobbering' bug. The flaw is situated within NGINX's internal evaluation engine when handling complex variables, exposing a heap-based buffer overflow and information leak when a configuration chains regular expression-based map directives with numbered capture groups. An unauthenticated remote attacker can exploit this weakness by transmitting crafted HTTP requests to trigger remote code execution or defeat ASLR.\n\n## TL;DR\nA pre-authentication heap buffer overflow and ASLR bypass in NGINX caused by regex capture state clobbering, permitting remote code execution under specific map configurations.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-119 / CWE-122\n- **Attack Vector**: Network (Unauthenticated)\n- **CVSS v3.1 Score**: 8.1 (High)\n- **CVSS v4.0 Score**: 9.2 (Critical)\n- **Exploit Status**: Proof-of-Concept / Weaponized Exploit Available\n- **CISA KEV**: No\n\n## Affected Systems\n\n- NGINX Open Source (Stable and Mainline)\n- NGINX Plus\n- NGINX Ingress Controller\n- NGINX WAF\n- NGINX Gateway Fabric\n- **NGINX Open Source (Stable)**: 0.9.6 to 1.30.3 (Fixed in: `1.30.4`)\n- **NGINX Open Source (Mainline)**: 0.9.6 to 1.31.2 (Fixed in: `1.31.3`)\n- **NGINX Plus**: R33 to R36 (up to P6) (Fixed in: `R36 P7 / 37.0.3.1`)\n\n## Mitigation\n\n- Upgrade NGINX binaries to the patched versions immediately.\n- Refactor NGINX configurations to utilize named capture groups rather than numbered capture groups within regular expressions.\n- Monitor system error logs for NGINX worker process exit signals, particularly SIGABRT (signal 6) and SIGSEGV (signal 11).\n\n**Remediation Steps:**\n1. Scan existing NGINX configuration files for regex-based map directives containing numbered capture references.\n2. Verify matches against the complex-value sink criteria where map variables and numbered captures are combined.\n3. Apply updates to stable/mainline packages or deploy patched vendor containers.\n4. In situations where updating is delayed, rewrite configurations to utilize named groups like (?...) to bypass the vulnerable global captures array.\n5. Reload the NGINX configuration using 'nginx -s reload' and verify functionality.\n\n## References\n\n- [Official NGINX Advisory & F5 SIRT Portal](https://my.f5.com/manage/s/article/K000162097)\n- [0xCyberstan Technical Deep Dive & Exploitation Writeup](https://cyberstan.co.uk/nginx-rce/)\n- [0xCyberstan Static Configuration Vulnerability Scanner](https://github.com/0xCyberstan/CVE-2026-42533-Config-Scanner)\n- [Open Source Vulnerabilities (OSV) Record](https://osv.dev/vulnerability/CVE-2026-42533)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-42533) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-19T12:02:10.200334Z"}, {"uuid": "61eff754-6833-4f3c-b2f8-15e062127959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqp35imbr32a", "content": "CVE-2026-42533\nNGINX web servers are at risk of crashing or being exploited by attackers if they use a specific configuration. An attacker can send a specially crafted HTTP request, causing the server to restart or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-15T15:50:05.029977Z"}, {"uuid": "fd5fe5cc-fc57-4564-81ae-ac624f796f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/116925017337379554", "content": "That's a lot of Fixes introduced in: NONE.\nhttps://my.f5.com/manage/s/article/K000162097\n\nA vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable in a string expression under certain conditions. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. (CVE-2026-42533)\nhttps://my.f5.com/manage/s/article/K000162097", "creation_timestamp": "2026-07-15T16:49:36.478685Z"}, {"uuid": "1b087103-678b-4ec2-8882-cfabc2bb4b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpauojijv2m", "content": "CVE-2026-42533 - NGINX Map directive and Regex matching vulnerability\nCVE ID : CVE-2026-42533\n \n Published : July 15, 2026, 2:33 p.m. | 43\u00a0minutes ago\n \n Description : A vulnerability exists in NGINX Plus and NGINX Open Source when a map\u00a0directive uses regex matching and a str...", "creation_timestamp": "2026-07-15T17:32:31.803938Z"}, {"uuid": "fd658d13-ce45-42e4-8f0c-ed3b6ef5dd7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/selfhost.directory/post/3mqpcouovz52f", "content": "\ud83d\ude80 New #release \u00b7 NGINX release-1.30.4\n\nnginx-1.30.4 stable version has been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memor\u2026\n\nCheck and #self-host it \u2192 selfhost.directory/project/nginx#update-5055825\n\n#selfhost #selfhosted #homelab #opensource", "creation_timestamp": "2026-07-15T18:05:05.039133Z"}, {"uuid": "5626e7e7-0605-4f8b-bf9b-ff0934afe5c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqq5jnrowx2a", "content": "F5 patched the NGINX code execution flaw CVE-2026-42533, along with CVE-2026-60005 and CVE-2026-56434. Update NGINX Plus and Open Source builds now.\n\n#NGINX #CVE202642533 #CodeExecution #F5 #Vulnerability", "creation_timestamp": "2026-07-16T02:05:21.284846Z"}, {"uuid": "b380de32-1dcc-4660-b4c3-7c34c829f231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mqqn6zxtcf22", "content": "F5 Patches High-Severity NGINX Vulnerabilities That Could Lead to Code\u00a0Execution\n\nF5 patches three high-severity NGINX vulnerabilities, including CVE-2026-42533, that could enable memory corruption, crashes, and code\u2026\n\nhttps://thecybersecguru.com/news/f5-nginx-vulnerabilities-code-execution/", "creation_timestamp": "2026-07-16T06:45:44.354072Z"}, {"uuid": "79860c2e-2130-4856-b568-2924c0c6d1bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc4ik4ie2t", "content": "\ud83d\udd17 CVE : CVE-2026-42533, CVE-2026-46333, CVE-2026-52865, CVE-2026-55723, CVE-2026-56434, CVE-2026-59762, CVE-2026-60005, CVE-2026-60062, CVE-2026-60065", "creation_timestamp": "2026-07-16T13:00:07.340450Z"}, {"uuid": "721a8ffb-11e8-4500-b0b0-cce7c5fb7654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mqrfi7yo4j2y", "content": "F5 issued an out-of-band patch for 8 NGINX and BIG-IP flaws, including CVE-2026-42533, a critical heap buffer overflow in NGINX Plus and Open Source, plus high-severity issues in Ingress Controller and BIG-IP. #NGINX #BIGIP #CVE202642533", "creation_timestamp": "2026-07-16T14:00:22.770755Z"}, {"uuid": "680efff5-2506-43c2-8ed5-e492da8d922f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mqrgpybos22c", "content": "\u26a0\ufe0f F5 patched 3 memory-safety flaws in NGINX incl. CVE-2026-42533 (CVSS 9.2) is a heap overflow via the map directive that crafted HTTP requests can trigger, with possible code exec if ASLR is off; plus an SSI use-after-free & a slice memory leak. Upgrade now to 1.31.3. Query: technology=\"Nginx\"", "creation_timestamp": "2026-07-16T14:22:42.001223Z"}, {"uuid": "5da057ef-3194-4b9c-89ab-1ffd7f4c554a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116930842661837024", "content": "Our CTI team identified a lot of activities targeting F5 NGINX Plus and NGINX Open Source (CVE-2026-42533) https://vuldb.com/vuln/379270/cti", "creation_timestamp": "2026-07-16T17:31:03.486418Z"}, {"uuid": "7d60cebf-459e-4183-876e-5abe60a56f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/true_secator/8417", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u043e\u043c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\nCVE-2026-53412 (CVSS 9,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0, Windows VDI Client \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u043b \u0435\u0433\u043e \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. Splunk \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. \u0418\u0437 \u043f\u044f\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u043b\u044f Splunk, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2026-20296 (\u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2026-20297 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438) \u0438 CVE-2026-20298 (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0445\u044d\u0448\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n3. F5 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 NGINX \u0438 BIG-IP.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-42533 (CVSS 9.2), \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 NGINX Plus \u0438 NGINX Open Source, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. F5 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n4. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro, ESET, Tenable \u0438 Tanium \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\nTenable\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Tenable Agent. CVE-2026-15265 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\nESET\u00a0\u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Inspect Connector \u0434\u043b\u044f Windows, \u0430 Tanium\u00a0- \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 DoS, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 Tanium Server.\n\nTrend Micro\u00a0\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cleaner One Pro \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b Trend Micro, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Bitdefender \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0443 \u0441\u0441\u044b\u043b\u043e\u043a Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 EDR.\n\n6. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Exchange Server (CVE-2026-42897, CVSS 8,1)\n\n7. \u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0435 Shark \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u044b \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430.\n\n8. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Node (npm) \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043f\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 AsyncAPI (\u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 2,25 \u043c\u043b\u043d.), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u043e\u044f\u043d \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-16T19:00:32.040737Z"}, {"uuid": "b39ee94e-4ea1-47a0-ac24-bba6e4b23919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/true_secator/8417", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u043e\u043c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\nCVE-2026-53412 (CVSS 9,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0, Windows VDI Client \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u043b \u0435\u0433\u043e \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. Splunk \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. \u0418\u0437 \u043f\u044f\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u043b\u044f Splunk, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2026-20296 (\u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2026-20297 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438) \u0438 CVE-2026-20298 (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0445\u044d\u0448\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n3. F5 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 NGINX \u0438 BIG-IP.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-42533 (CVSS 9.2), \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 NGINX Plus \u0438 NGINX Open Source, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. F5 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n4. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro, ESET, Tenable \u0438 Tanium \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\nTenable\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Tenable Agent. CVE-2026-15265 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\nESET\u00a0\u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Inspect Connector \u0434\u043b\u044f Windows, \u0430 Tanium\u00a0- \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 DoS, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 Tanium Server.\n\nTrend Micro\u00a0\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cleaner One Pro \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b Trend Micro, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Bitdefender \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0443 \u0441\u0441\u044b\u043b\u043e\u043a Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 EDR.\n\n6. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Exchange Server (CVE-2026-42897, CVSS 8,1)\n\n7. \u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0435 Shark \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u044b \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430.\n\n8. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Node (npm) \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043f\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 AsyncAPI (\u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 2,25 \u043c\u043b\u043d.), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u043e\u044f\u043d \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-17T00:00:48.947097Z"}, {"uuid": "ef871d53-4264-4bad-bf64-5799ef523eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mqsh6qbxvr2p", "content": "HIGH severity CVE just published in nginx:\n\nCVE-2026-42533. A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-42533", "creation_timestamp": "2026-07-17T00:03:31.136676Z"}, {"uuid": "5e94e858-64aa-4e20-92f6-7e8cf3d15c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqswxbzsby2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-15409: 18 interactions\nCVE-2026-44747: 14 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46817: 5 interactions\nCVE-2026-20253: 4 interactions\nCVE-2026-42533: 4 interactions\n", "creation_timestamp": "2026-07-17T04:45:41.201733Z"}, {"uuid": "2c42ff41-84f5-4cc2-b69e-b9048f7a335d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqu2fohrzs2e", "content": "CVE-2026-42533 - nginx\nNGINX servers may leak sensitive configuration data. This can happen when attackers exploit a specific configuration setting. To protect your NGINX servers, review\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nginx #canonical #UbuntuPro1404LTS #CVE #infosec", "creation_timestamp": "2026-07-17T15:20:08.379725Z"}, {"uuid": "81216297-312c-4c11-91f1-7a649d8ecb15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mqzq7hvem62p", "content": "F5 shipped fixes for CVE-2026-42533, a configuration-dependent nginx heap buffer overflow enabling remote DoS and possible RCE under certain ASLR conditions.\n", "creation_timestamp": "2026-07-19T21:33:38.198453Z"}, {"uuid": "3d305c46-7af0-4d91-a276-815a9d34d36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mqzqclkdna2o", "content": "F5 patched a critical nginx heap buffer overflow (CVE-2026-42533) rated 9.2 on CVSS v4, affecting versions since 2011. The flaw [\u2026]", "creation_timestamp": "2026-07-19T21:35:22.390005Z"}, {"uuid": "e18a608c-9764-49ab-b7c3-d64d6a70c26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "content": "F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 (stable) and 1.31.3 (mainline), and in NGINX Plus 37.0.3.1; anyone on an earlier build should upgrade.\n\nTriggering it can crash or restart the worker, causing a denial of", "creation_timestamp": "2026-07-19T22:00:53.527644Z"}, {"uuid": "35e30b19-1292-47ff-ae08-4261cde3b980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9548", "content": "\ud83d\uded1 WARNING - A new critical NGINX vulnerability that has existed for 15-years lets unauthenticated attackers crash worker processes with crafted HTTP requests.\n\nCVE-2026-42533 affects specific regex map configurations.\n\nF5 says it may also allow pre-auth RCE if ASLR is disabled or bypassed.\n\nRead how the bug works: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-19T23:00:04.040564Z"}, {"uuid": "102a6691-48f0-4650-baab-80b70a5fc303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9547", "content": "\ud83d\uded1 WARNING - A new critical NGINX vulnerability that has existed for 15-years lets unauthenticated attackers crash worker processes with crafted HTTP requests.\n\nCVE-2026-42533 affects specific regex map configurations.\n\nF5 says it may also allow pre-auth RCE if ASLR is disabled or bypassed.\n\nRead how the bug works: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-19T23:00:04.080830Z"}, {"uuid": "df45532f-a35d-488e-b666-ce6797a6e521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mqzvtc2sho2s", "content": "\ud83e\udd16 CVE-2026-42533: Critical heap buffer overflow in NGINX. Unauthenticated remote attacker can crash workers or achieve RCE via crafted HTTP requests. Patched in nginx 1.30.4/1.31.3.\n\nhttps://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-19T23:14:11.646640Z"}, {"uuid": "542f2854-892b-47ca-ac44-3becb5c7fcec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9548", "content": "\ud83d\uded1 WARNING - A new critical NGINX vulnerability that has existed for 15-years lets unauthenticated attackers crash worker processes with crafted HTTP requests.\n\nCVE-2026-42533 affects specific regex map configurations.\n\nF5 says it may also allow pre-auth RCE if ASLR is disabled or bypassed.\n\nRead how the bug works: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-20T00:00:08.266377Z"}, {"uuid": "6a125037-1d1e-4491-a2c2-63e9dc0b59a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9547", "content": "\ud83d\uded1 WARNING - A new critical NGINX vulnerability that has existed for 15-years lets unauthenticated attackers crash worker processes with crafted HTTP requests.\n\nCVE-2026-42533 affects specific regex map configurations.\n\nF5 says it may also allow pre-auth RCE if ASLR is disabled or bypassed.\n\nRead how the bug works: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-20T00:00:08.303481Z"}, {"uuid": "1e74485e-8c4d-4837-b231-160bc65ebf1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mqzyi7fg2x2o", "content": "NGINX \u91cd\u5927\u8106\u5f31\u6027 CVE-2026-42533 \u304c\u30ef\u30fc\u30ab\u30fc\u30d7\u30ed\u30bb\u30b9\u3092\u30af\u30e9\u30c3\u30b7\u30e5\u3001RCE \u306e\u53ef\u80fd\u6027\n\nF5 \u304c\u6b63\u898f\u8868\u73fe\u30de\u30c3\u30d7\u306e\u30d2\u30fc\u30d7\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u8106\u5f31\u6027 CVE-2026-42533 \u3092\u4fee\u6b63\u3002nginx \u30ef\u30fc\u30ab\u30fc\u30d7\u30ed\u30bb\u30b9\u306e\u30af\u30e9\u30c3\u30b7\u30e5\u3068\u30b5\u30fc\u30d3\u30b9\u59a8\u5bb3\u304c\u78ba\u8a8d\u3055\u308c\u3066\u304a\u308a\u3001\u7279\u5b9a\u306e\u69cb\u6210\u74b0\u5883\u3067\u306f RCE \u306e\u53ef\u80fd\u6027\u3082\u6307\u6458\u3055\u308c\u3066\u3044\u308b\u3002\u65e9\u6025\u306a\u30d1\u30c3\u30c1\u9069\u7528\u304c\u63a8\u5968\u3055\u308c\u308b\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-07-20T00:01:40.990951Z"}, {"uuid": "b69ebf13-f0a2-4cc7-a9e4-62aaf5bfac45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "content": "F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 (stable) and 1.31.3 (mainline), and in NGINX Plus 37.0.3.1; anyone on an earlier build should upgrade.\n\nTriggering it can crash or restart the worker, causing a denial of", "creation_timestamp": "2026-07-20T01:00:37.847763Z"}, {"uuid": "b55b7f3f-aa5d-4a6a-9e1d-f5adc4238215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/GithubRedTeam/94232", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a nginx-map-risk-audit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a srkyn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 01:45:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDefensive NGINX CVE-2026-42533 map regex risk audit with config scanner, Splunk/Defender notes, and lab evidence.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T03:00:03.704852Z"}, {"uuid": "d14b34d7-5a7f-48f8-85d1-0875e187360f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mr2cx4hecz2n", "content": "CVE-2026-42533: Heap Buffer Overflow in NGINX Spans 15 Years of Versions", "creation_timestamp": "2026-07-20T03:08:59.010939Z"}, {"uuid": "18c3f72d-37c9-4e24-9804-89aedc495d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mr2f2dc5l423", "content": "Critical NGINX flaw CVE-2026-42533 allows remote code execution. Update now. #NGINX #CVE202642533 #CyberSecurity #RemoteCodeExecution #Vulnerability #PatchNow thedailytechfeed.com/15-year-old-...", "creation_timestamp": "2026-07-20T03:46:35.146417Z"}, {"uuid": "d746f3da-fd08-4bb0-a6ec-f1134a2bec8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mr2fsxdmxh2h", "content": "NGINX heap buffer overflow CVE-2026-42533 can be triggered by crafted HTTP requests to crash/restart worker, risking RCE. Upgrade to nginx 1.30.4/1.31.3 or NGINX Plus 37.0.3\u2026 #Cybersecurity #Vulnerability #InfoSec\n\nSource: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-20T04:00:20.423230Z"}, {"uuid": "12a07aa8-764a-4227-9fb9-6b4b9cd79a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42533", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mr2k2ymans27", "content": "Critical nginx Heap Overflow: Patch Now or Face Unauthenticated RCE Risk\n\nhttps://blindthoughts.com/nginx-heap-overflow-cve-2026-42533-patch\n\n#nginx #cve #webserver #remotecodeexecution #patchnow", "creation_timestamp": "2026-07-20T05:16:24.678669Z"}, {"uuid": "5ca7d02c-254e-4570-8235-1b2abfa56fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/alejandxr.bsky.social/post/3mr2lfaf5na2y", "content": "CVE-2026-42533 turns NGINX map directives into a heap overflow risk. If your routing maps handle unvalidated user input, you are exposing a direct memory corruption surface. Patching is the start, but auditing the input flow is the real fix.", "creation_timestamp": "2026-07-20T05:40:02.206420Z"}, {"uuid": "f3af9169-e56c-4f9e-9d69-9bafff3a87b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mr2qpdcvfc2i", "content": "F5 patches CVE-2026-42533, a regex map heap overflow that crashes nginx workers and may allow RCE in specific configurations.", "creation_timestamp": "2026-07-20T07:15:10.075090Z"}, {"uuid": "2e5b4bef-172c-4682-b8c1-1f36c26dd3b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/okeilv.bsky.social/post/3mr2rmvbixt2v", "content": "\ud83d\udea8 Nginx kritisk\u0101 k\u013c\u016bda CVE-2026-42533! Hakeri var p\u0101r\u0146emt serveri. Steidzami atjaunini versiju! #Nginx #dro\u0161\u012bba #IT Lasi vair\u0101k: https://okei.lv/kritiska-ievainojamiba-nginx-serveros-ka-sevi-pasargat/", "creation_timestamp": "2026-07-20T07:31:41.476972Z"}, {"uuid": "c12825f1-229b-47fa-b85b-c10f6261b23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/kerzinger.at/post/3mr2rwak7o22c", "content": "Eine neue Trending CVE (CVE-2026-42533, CVSS 9.2) betrifft NGINX Open Source und NGINX Plus. Details \ud83d\udc49 vulndex.at/cve/CVE-2026...\n\n#CVE #Vulnerability #nginx", "creation_timestamp": "2026-07-20T07:36:56.850990Z"}, {"uuid": "fca86eb0-0e44-49d6-aa3d-918d7225b820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/vulndex.at/post/3mr2rwrotdc2c", "content": "Eine neue Trending CVE (CVE-2026-42533, CVSS 9.2) betrifft NGINX Open Source und NGINX Plus. Details \ud83d\udc49 vulndex.at/cve/CVE-2026...\n\n#CVE #Vulnerability #nginx", "creation_timestamp": "2026-07-20T07:37:14.529393Z"}, {"uuid": "e9c21189-26d0-4ae1-8a61-3356d006ddca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/GithubRedTeam/94277", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-vagrant-box\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Daniyal48\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 08:11:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAn isolated Vagrant testbed designed to simulate a complete attack chain: Initial access via the Nginx heap buffer overflow (CVE-2026-42533) followed by root privilege escalation using the Ghostlock kernel vulnerability (CVE-2026-43449).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T10:00:04.871576Z"}, {"uuid": "4a5655eb-e1ed-4fab-a856-54c1976a9030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/ie-news.bsky.social/post/3mr2zwqhk232r", "content": "Active Exploitation Alert: Critical NGINX Vulnerabilities (CVE-2026-42533, CVE-2026-42945) Enable Remote Code Execution and Worker Crashes \u2013 Rescana\n\nhttps://www.europesays.com/ie/594826/\n\nExecutive Summary A critical vulnerability in NGINX\u00a0(CVE-2026-42533, also referenced as NGINX \u2026", "creation_timestamp": "2026-07-20T10:00:22.224630Z"}, {"uuid": "095a3a62-8fd6-4f65-977d-ba0bc8349eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr346oefwr24", "content": "CVE-2026-42533 Exposes Critical Pre-Auth nginx RCE Flaw", "creation_timestamp": "2026-07-20T10:40:35.446293Z"}, {"uuid": "633e47c9-ceac-4246-93b2-e54256d98dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116951958697276090", "content": "En las \u00faltimas 24 horas, se detectaron vulnerabilidades cr\u00edticas en WordPress, 7-Zip, Foxit PDF Reader y NGINX que permiten ejecuci\u00f3n remota de c\u00f3digo y escalada de privilegios, mientras una avanzada campa\u00f1a rusa con el RAT Starland intensifica amenazas; la actualizaci\u00f3n inmediata y la vigilancia continua son esenciales. Descubre estos y m\u00e1s detalles en el siguiente listado de noticias sobre seguridad inform\u00e1tica:\n\ud83d\uddde\ufe0f \u00daLTIMAS NOTICIAS EN SEGURIDAD INFORM\u00c1TICA \ud83d\udd12====| \ud83d\udd25 LO QUE DEBES SABER HOY \ufeff\ufeff20/07/26\ufeff\ufeff  \ud83d\udcc6 |==== \n\ud83d\udd13 EXPLOIT BROKERS PAGAN $500,000 POR UNA RCE EN WORDPRESS\nSe ha detectado una vulnerabilidad cr\u00edtica que permite la ejecuci\u00f3n remota de c\u00f3digo (RCE) en WordPress. La publicaci\u00f3n se retras\u00f3 estrat\u00e9gicamente para que los administradores pudieran actualizar sus sistemas sin riesgo durante el fin de semana. Si utilizas WordPress, es vital que verifiques la seguridad de tu instancia con la herramienta disponible en https://wp2shell.com/. Mantente alerta para proteger tu sitio frente a posibles ataques. M\u00e1s detalles y c\u00f3mo verificar tu seguridad aqu\u00ed \ud83d\udc49 https://djar.co/YsbS\n\ud83d\udee1\ufe0f NUEVA VULNERABILIDAD EN 7-ZIP PUEDE EJECUTAR C\u00d3DIGO AL EXTRAER ARCHIVOS XZ MANIPULADOS\nSe ha identificado CVE-2026-14266, un desbordamiento de pila de alta gravedad en el decodificador XZ de 7-Zip que permite la ejecuci\u00f3n remota de c\u00f3digo al abrir archivos comprimidos maliciosos. La versi\u00f3n 26.02 ya incluye el parche que corrige esta falla cr\u00edtica. Recomendamos actualizar inmediatamente para evitar compromisos de seguridad. Inf\u00f3rmate y actual\u00edzate aqu\u00ed \ud83d\udc49 https://djar.co/QRKdfM\n\u26a0\ufe0f ESCALADA DE PRIVILEGIOS EN FOXIT PDF READER PERMITE CONTROL TOTAL DEL SISTEMA\nUn grave fallo de seguridad (CVE-2026\u201357239) en Foxit PDF Reader permite a usuarios sin privilegios elevar permisos hasta NT AUTHORITY\\SYSTEM, otorgando control total sobre el sistema afectado. Esta vulnerabilidad pone en riesgo entornos corporativos y personales, por lo que actualizar y revisar las pol\u00edticas de seguridad es urgente. Conoce c\u00f3mo protegerte aqu\u00ed \ud83d\udc49 https://djar.co/r0Zuj\n\ud83d\udd25 CVE-2026-42533: FALLA CR\u00cdTICA EN NGINX PERMITE EJECUCI\u00d3N REMOTA DE C\u00d3DIGO\nF5 ha publicado un parche para corregir un bug muy serio en NGINX que puede provocar ca\u00eddas del servidor y, en casos extremos, ejecuci\u00f3n remota de c\u00f3digo mediante solicitudes HTTP manipuladas. Los administradores de sistemas deben aplicar esta actualizaci\u00f3n cuanto antes para evitar intrusiones y mantener la integridad de sus servicios web. Descubre los pasos para mitigar el riesgo aqu\u00ed \ud83d\udc49 https://djar.co/g35e9\n\ud83d\udea8 UAT-11795: NUEVO RAT STARLAND Y C2 PERSONALIZADO EN CAMPA\u00d1A FINANCIADA POR UN ADVERSARIO RUSO\nCisco Talos alerta sobre UAT-11795, una campa\u00f1a avanzada que utiliza el RAT Starland junto a un comando y control (C2) exclusivo, dirigida contra objetivos en EE. UU. y Europa desde junio de 2025. Este adversario sofisticado refuerza la necesidad de fortalecer la detecci\u00f3n y respuesta ante amenazas con vigilancia continua y soluciones actualizadas. Obt\u00e9n detalles para proteger tu entorno aqu\u00ed \ud83d\udc49 https://djar.co/zqN7\n\ud83d\udcc5 RESUMEN SEMANAL DE CIBERSEGURIDAD 13/07/26 - 19/07/26: DFIR Y TALLERES PR\u00c1CTICOS EN INCIBE\nLa semana pasada, Lorenzo Mart\u00ednez destac\u00f3 en el CyberSecurity Bootcamp 2026 organizado por INCIBE con su taller pr\u00e1ctico sobre DFIR (Digital Forensics and Incident Response), mostrando herramientas y artefactos esenciales para la respuesta ante incidentes. Este tipo de eventos fortalecen la comunidad y aumentan la preparaci\u00f3n frente a amenazas emergentes. Conoce m\u00e1s sobre el evento y recursos clave aqu\u00ed \ud83d\udc49 https://djar.co/qAu7M", "creation_timestamp": "2026-07-20T11:01:08.644843Z"}, {"uuid": "56955e70-c726-422e-8a03-0287b3b374ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr35sf2je62c", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers", "creation_timestamp": "2026-07-20T11:09:30.485246Z"}, {"uuid": "9d32affd-329c-405c-9dd4-7db9332fa234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mr36x2i5ks2s", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\n\nsecurityaffairs.com/195674/hacki...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "creation_timestamp": "2026-07-20T11:30:06.847572Z"}, {"uuid": "9cec15ad-04ee-4b43-bd89-325d1fa8e82a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mr37icdfno23", "content": "Une faille vieille de 15 ans d\u00e9couverte dans NGINX\n\n-> CVE-2026-42533\n\nCette faille de s\u00e9curit\u00e9 critique expose les serveurs Web \u00e0 un d\u00e9ni de service, et elle pourrait m\u00eame permettre une ex\u00e9cution de code \u00e0 distance. \n\nPlus d'infos\ud83d\udc47\n- www.it-connect.fr/nginx-cve-20...\n\n#nginx #infosec", "creation_timestamp": "2026-07-20T11:39:40.313102Z"}, {"uuid": "65b7fcdc-7952-412e-9cd7-95bb752b360f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mr3aa7bgfy2u", "content": "It seems we cannot even rely on our trusty web servers anymore, as F5 has scrambled to patch a rather terrifying heap buffer overflow in NGINX. This critical flaw, labeled CVE-2026-42533, compromises any web administrator running unpatched NGINX instances exposed to malicious HTT...\n\nRead full story", "creation_timestamp": "2026-07-20T11:53:01.659254Z"}, {"uuid": "c2775f4f-c970-4319-8e1d-90afbae2f4f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/ctinow/253597", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\nhttps://ift.tt/AJH05gL", "creation_timestamp": "2026-07-20T12:00:04.135712Z"}, {"uuid": "d3c049e9-ab4f-4e82-8e9c-dd8f9b43e560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/3WcCqL8vieXLsY-uvhRw4xP9N0uTGj-rYeNCRdz3eQJS5pzQ", "content": "", "creation_timestamp": "2026-07-20T12:00:04.245927Z"}, {"uuid": "2001c846-b631-4c2a-8155-54f711a7b876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42533", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116952420998772978", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers#CVE_2026_42533 https://securityaffairs.com/195674/hacking/cve-2026-42533-critical-nginx-bug-could-turn-http-requests-into-server-takeovers.html", "creation_timestamp": "2026-07-20T12:58:42.819811Z"}, {"uuid": "76f5109c-8521-45ff-8a1f-2910a40dd9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/mrviind.bsky.social/post/3mr3ek2453k2k", "content": "F5 patched CVE-2026-42533 on July 15. Risk depends on config and ASLR, not version. Flaw in nginx 0.9.6-1.31.2 since 2011. CVSS 9.2. Check regex map with capture variable in output.\n\nSource: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html\n\n#infosec #cve #techtrends #dig", "creation_timestamp": "2026-07-20T13:10:07.072590Z"}, {"uuid": "545d20a2-c33e-43ab-a9de-0554cbd80147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mr3rfw4yjy2u", "content": "Critical nginx heap buffer overflow allows unauthenticated RCE and DoS attacks. F5 patched CVE-2026-42533 on July 15\u2014if you're running an older build, update now.\n\nhttps://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html\n\n#cybersecurity #infosec", "creation_timestamp": "2026-07-20T17:00:27.197695Z"}, {"uuid": "b18d4ec4-bdc9-460d-b647-ceac2cb43b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/GithubRedTeam/94336", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533-Config-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xCyberstan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 6  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 15:15:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStatic config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture \u2192 heap overflow / info leak).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T18:00:04.441290Z"}, {"uuid": "172eab42-69b0-4dca-a082-4efc5f6481bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mr3yxpagxk2a", "content": "Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution\n\nF5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patch\u2026\n#hackernews #news", "creation_timestamp": "2026-07-20T19:15:39.885405Z"}, {"uuid": "db953ac0-a3b8-4029-a17c-616cee1680bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mr3zyvbuut23", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\n\nThis article focuses heavily on the potential for remote code execution based on ASLR bypass, yet it frames the immediate threat primarily as a denial-of-service issue caused by heap buffer overflows. Given that m\u2026", "creation_timestamp": "2026-07-20T19:34:13.840846Z"}, {"uuid": "9ad20455-68b5-4371-97fd-99260227c300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mr43kolruo2i", "content": "CVE-2026-42533: Critical NGINX Map Regex Flaw Can Trigger Heap Buffer Overflow and Possible RCE\n\nThe strongest version of this narrative is a necessary technical alert: a specific, high-impact vulnerability exists in a widely used piece of infrastructure, and the vendor has provided the fix. The\u2026", "creation_timestamp": "2026-07-20T20:02:04.758160Z"}, {"uuid": "4520b92b-ab5a-452e-9ba2-9cb6d896b222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mr4553o5sb2r", "content": "\ud83d\udce2 CVE-2026-42533 : RCE critique pr\u00e9-authentification dans nginx via heap overflow et fuite ASLR\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nPubli\u00e9 le 20 juillet 2026 p\u2026\nhttps://cyberveille.ch/posts/2026-07-20-cve-2026-42533-rce-critique-pre-authentification-dans-nginx-via-heap-overflow-et-fuite-aslr/ #ASLR_bypass #Cyberveille", "creation_timestamp": "2026-07-20T20:30:15.867334Z"}, {"uuid": "726c2982-877e-4ec2-b5c0-327286de9793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mr45pn4rn327", "content": "F5 has addressed a critical vulnerability (CVE-2026-42533) in nginx that allows remote, unauthenticated attackers to exploit a heap buffer overflow, potentially leading to denial of service or remote code execution. Patched on July 15, 2023, in nginx versions 1.30.4, 1.31.3, and NGINX Plus 37.0.3.", "creation_timestamp": "2026-07-20T20:40:38.511765Z"}, {"uuid": "6aa23eea-0d1f-493c-8c7d-da79d28f6830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/hatena-bookmark.bsky.social/post/3mr4g2yozck2h", "content": "#\ud83d\udd16\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\n2026\u5e747\u6708\u5831\u544a\u306enginx\u8106\u5f31\u6027\uff08CVE-2026-42533\uff09\u3092Docker\u3067\u518d\u73fe\u3057\u3066\u307f\u305f | DevelopersIO\n\n2026\u5e747\u670815\u65e5\u306b\u4fee\u6b63\u3055\u308c\u305fnginx\u306e\u8a8d\u8a3c\u524dRCE\u8106\u5f31\u6027 CVE-2026-42533\uff08CVSS 9.2\uff09\u306e\u52d5\u4f5c\u3092Docker\u30ed\u30fc\u30ab\u30eb\u74b0\u5883\u3067\u518d\u73fe\u3057\u307e\u3057\u305f\u3002Two-Pass\u30ad\u30e3\u30d7\u30c1\u30e3\u30af\u30ed\u30d0\u30ea\u30f3\u30b0\u306b\u3088\u308a\u30011\u56de\u306eGET\u30ea\u30af\u30a8\u30b9\u30c8\u3067\u30d2\u30fc\u30d7\u60c5\u5831\u304c\u6f0f\u6d29\u3059\u308b\u69d8\u5b50\u3092\u78ba\u8a8d\u3057\u3001\u4fee\u6b63\u72481.30.4\u3067\u554f\u984c\u304c\u89e3\u6d88\u3055\u308c\u308b\u3053\u3068\u3092\u691c\u8a3c\u3057\u3066\u3044\u307e\u3059\u30020.9.6\u304b\u3089\u4fee\u6b63\u7248\u672a\u6e80\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u5f71...", "creation_timestamp": "2026-07-20T23:10:09.596031Z"}, {"uuid": "3154919f-508b-430e-8f17-6f897a97623c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/pphm_HackerNews/2158", "content": "\ud83d\udd34 CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\n\nF5 fixes critical nginx flaw CVE-2026-42533 that can crash servers and, in some cases, allow remote code execution through crafted HTTP requests.\n\nF5 released patches for a critical nginx vulnerability, tracked as CVE-2026-42533 (CVSS score of 9.2), that can allow an unauthenticated attacker to trigger a heap buffer overflow using specially crafted HTTP requests.\n\n\u201cheap buffer overflow might occur in a worker process when using the map directive with regex matching if the map variable was included in a string expression after a capture affected by this map; a similar issue might happen when using a non-cacheable variable in a string expression (CVE-2026-42533).\u201d reads the advisory.", "creation_timestamp": "2026-08-23T00:00:44.704132Z"}, {"uuid": "2123aa1f-4448-4391-8cc1-308f5df19848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94277", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-vagrant-box\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Daniyal48\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 08:11:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAn isolated Vagrant testbed designed to simulate a complete attack chain: Initial access via the Nginx heap buffer overflow (CVE-2026-42533) followed by root privilege escalation using the Ghostlock kernel vulnerability (CVE-2026-43449).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:39.577738Z"}, {"uuid": "5b49106b-9ff3-48d9-b9da-58bff1ed3c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/GithubRedTeam/94336", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533-Config-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xCyberstan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 6  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 15:15:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStatic config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture \u2192 heap overflow / info leak).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:29.804591Z"}, {"uuid": "b53adef5-9a52-43eb-8bbc-96bbcb15dbd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/ctinow/253597", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\nhttps://ift.tt/AJH05gL", "creation_timestamp": "2026-07-21T00:00:39.140748Z"}, {"uuid": "b5322fe1-e5c5-4693-b253-c7788a199477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94232", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a nginx-map-risk-audit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a srkyn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 01:45:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDefensive NGINX CVE-2026-42533 map regex risk audit with config scanner, Splunk/Defender notes, and lab evidence.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:40.224097Z"}, {"uuid": "196975cb-6553-41ea-8fae-e38de2ccc2a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/3WcCqL8vieXLsY-uvhRw4xP9N0uTGj-rYeNCRdz3eQJS5pzQ", "content": "", "creation_timestamp": "2026-07-21T01:00:27.692273Z"}, {"uuid": "30298a80-f475-4a01-8f5d-960ee19e7af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3mr4nr5qr4j27", "content": "NGINX Map Regex RCE Gets Public Scanner: Patch Now, Full Exploit Due\u00a0August\n\nCVE-2026-42533 NGINX vulnerability now has a public config scanner as researcher Stan Shaw warns the critical heap buffer overflow \u2014 present in all NGINX versions since 2011 \u2014 defeats ASLR on its own via an info-leak\u2026", "creation_timestamp": "2026-07-21T01:27:49.634475Z"}, {"uuid": "dcf49f02-f6bf-49c3-be6a-80354046c772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mr4pwax6mk2a", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\n\nF5 fixes critical nginx flaw CVE-2026-42533 that can crash servers and, in some cases, allow remote code execution through crafted HTTP requests. F5 released patches for a critical nginx vulnerabili\u2026\n#hackernews #news", "creation_timestamp": "2026-07-21T02:06:28.071339Z"}, {"uuid": "29bdc94c-482d-4793-a5fa-4917bc14cbed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mr4z4d3u232r", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 65 interactions\nCVE-2026-60137: 51 interactions\nCVE-2026-58532: 47 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-63030: 35 interactions\nCVE-2026-60137: 28 interactions\nCVE-2026-42533: 10 interactions\n", "creation_timestamp": "2026-07-21T04:50:55.010005Z"}, {"uuid": "33d9b8e6-549c-4f2f-9789-a8b99d4a394b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42533", "type": "seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3mr4zv22eap25", "content": "2026\u5e747\u6708\u5831\u544a\u306enginx\u8106\u5f31\u6027\uff08CVE-2026-42533\uff09\u3092Docker\u3067\u518d\u73fe\u3057\u3066\u307f\u305f | DevelopersIO\nhttps://dev.classmethod.jp/articles/cve-2026-42533-nginx-rce-docker-repro/", "creation_timestamp": "2026-07-21T05:04:44.440708Z"}, {"uuid": "c2ea2380-b69d-463e-9f13-a8f775b2cabe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mr5kg5ilwg2m", "content": "NGINX, falla critica rimasta nascosta 15 anni: rischio crash e codice remoto\nLa vulnerabilit\u00e0 CVE-2026-42533 sfrutta regex e valutazione a due passaggi per corrompere la mem...\nhttps://www.ilsoftware.it/nginx-vulnerabilita-crash-server-attacco-remoto/", "creation_timestamp": "2026-07-21T10:00:38.129034Z"}, {"uuid": "7072bd86-d320-42dd-924b-f3db11ac96f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mr5qb7k2dp2v", "content": "\u26a0\ufe0f PATCH NOW\n\nNGINX patched CVE-2026-42533, a critical 9.2 heap-overflow a remote attacker can trigger with crafted requests.\n\nUnlike June's nginx flaws, this one hits a common regex map config, so most servers are in range.\n\nPatch to 1.30.4 or 1.31.3 now.", "creation_timestamp": "2026-07-21T11:45:15.233566Z"}, {"uuid": "7edb7007-702d-4180-b990-62478c2dfc66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/gGz7JyGqZYT4VnMsR3bt0_p3QI0-Vi7iMv05yZVGOmS6PA", "content": "", "creation_timestamp": "2026-07-21T13:00:06.502895Z"}, {"uuid": "0f3e2f62-6e81-4bb4-b7f5-7ac57a05c69e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr5vy64t3x26", "content": "F5 patches a critical NGINX CVE-2026-42533 vulnerability causing remote code execution. Learn how to update your server and secure your configuration.\n\n#NGINX #CVE202642533 #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-21T13:27:34.136841Z"}, {"uuid": "869cad1a-5468-4538-8b50-955c0b156079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94336", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533-Config-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xCyberstan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 6  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 15:15:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStatic config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture \u2192 heap overflow / info leak).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-22T00:00:21.266031Z"}, {"uuid": "d326fa3f-6964-4bd9-bdcf-18591365e6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/gGz7JyGqZYT4VnMsR3bt0_p3QI0-Vi7iMv05yZVGOmS6PA", "content": "", "creation_timestamp": "2026-07-22T00:00:22.636884Z"}, {"uuid": "a5f1f437-1d6a-469b-8f96-b5c18bc01fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mr7mbat4ud2z", "content": "K000162097: NGINX map directive and regex matching vulnerability CVE-2026-42533 #patchmanagement", "creation_timestamp": "2026-07-22T05:39:00.620761Z"}, {"uuid": "a4783863-c8f5-486c-af8b-fc1a4d063fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mr7shpp6dz26", "content": "F5 fixed a critical nginx flaw (CVE-2026-42533) that allows remote, unauthenticated attackers to crash worker processes. Update to nginx 1.30.4/1.31.3 or NGINX Plus 37.0.3.1 now!", "creation_timestamp": "2026-07-22T07:30:00.921316Z"}, {"uuid": "3c2aefd8-1da6-43c6-84e8-143efee7bd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrabpvon4q2y", "content": "CVE-2026-42533 NGINX Map directive and Regex matching vulnerability - Darren Cho #CVE2026 #NGINX #CyberSecurity", "creation_timestamp": "2026-07-22T12:03:01.471835Z"}, {"uuid": "02c6a9d5-d5e9-47cd-90a9-b95f6d05e499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrabpykqcg2p", "content": "CVE-2026-42533: NGINX's Regex Vulnerability Unveils a Concrete Attack Path #CVE202642533 #NGINX #CyberSecurity", "creation_timestamp": "2026-07-22T12:03:05.083207Z"}, {"uuid": "053efc09-e969-41f8-8d0a-b716a48af544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrabq3la3o2o", "content": "CVE-2026-42533: NGINX Vulnerability Highlights Gaps in Web Server Security #CVE202642533 #NGINX #WebSecurity", "creation_timestamp": "2026-07-22T12:03:07.693845Z"}, {"uuid": "c3c1cb39-79b1-4b4f-b438-e1d3ec192a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrabq6ojav2j", "content": "CVE-2026-42533: NGINX's Regex Bug Highlights Gaps in Security Protocols #CVE2026 #NGINX #CyberSecurity", "creation_timestamp": "2026-07-22T12:03:10.895211Z"}, {"uuid": "646426c2-a9bc-4468-ac57-30f2d091eaea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrabuq2fk42v", "content": "CVE-2026-42533: NGINX Vulnerability Claims Lack Evidence of Severity #CVE202642533 #NGINX #CyberSecurity", "creation_timestamp": "2026-07-22T12:05:43.256584Z"}, {"uuid": "965ecd2a-65bb-40b2-9411-1c816d3ab759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrabutu64b2g", "content": "CVE-2026-42533: Is NGINX's Vulnerability a Harbinger of Widespread Exploitation? #CVE202642533 #NGINX #vulnerability", "creation_timestamp": "2026-07-22T12:05:47.656904Z"}, {"uuid": "4e04e09d-a418-4039-8752-6f514bef7ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/HackerNewscyber/3270", "content": "\u2708\ufe0f \u0647\u0634\u062f\u0627\u0631 \u062f\u0631\u0628\u0627\u0631\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc NGINX\u061b \u062e\u0637\u0631 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a HTTP\n\n\ud83c\udfa5 \u0634\u0631\u06a9\u062a F5 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 NGINX \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-42533 \u0648 \u0627\u0645\u062a\u06cc\u0627\u0632 9.2 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u200c\u0646\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u060c \u0645\u0648\u062c\u0628 \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 \u0648 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0634\u0631\u0627\u06cc\u0637 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0634\u0648\u0646\u062f.\n\n\ud83c\udfa4\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 0.9.6 \u062a\u0627 1.31.2 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc NGINX 1.30.4\u060c 1.31.3 \u0648 NGINX Plus 37.0.3.1 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u067e\u0698\u0648\u0647\u0634\u06af\u0631\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0632 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627 \u062e\u0648\u0627\u0633\u062a\u0647\u200c\u0627\u0646\u062f \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0646\u0633\u0628\u062a \u0628\u0647 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u062e\u0648\u062f \u0627\u0642\u062f\u0627\u0645 \u06a9\u0646\u0646\u062f.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-22T16:00:04.460132Z"}, {"uuid": "ce0310b8-4881-457a-a9e4-42d058fd010b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/FHM-54j_n1Y9BIE2cvmAOWuEiajifCsiTjgu51p5blAHmgA", "content": "", "creation_timestamp": "2026-07-22T17:00:04.053487Z"}, {"uuid": "8d77cbe3-63b4-414c-b5c5-4617c8ffae0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00", "content": "", "creation_timestamp": "2026-07-22T17:00:04.120823Z"}, {"uuid": "a1b66b7c-fdfa-4ced-b9e4-d4c83d0c5bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "Telegram/FHM-54j_n1Y9BIE2cvmAOWuEiajifCsiTjgu51p5blAHmgA", "content": "", "creation_timestamp": "2026-07-23T00:00:10.077791Z"}, {"uuid": "c71097e0-58b0-42a7-a45c-51b677713356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00", "content": "", "creation_timestamp": "2026-07-23T00:00:10.258532Z"}, {"uuid": "1a5c0774-a808-4d2c-888d-6d18cb26d2a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/HackerNewscyber/3270", "content": "\u2708\ufe0f \u0647\u0634\u062f\u0627\u0631 \u062f\u0631\u0628\u0627\u0631\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc NGINX\u061b \u062e\u0637\u0631 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a HTTP\n\n\ud83c\udfa5 \u0634\u0631\u06a9\u062a F5 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 NGINX \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-42533 \u0648 \u0627\u0645\u062a\u06cc\u0627\u0632 9.2 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u200c\u0646\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u060c \u0645\u0648\u062c\u0628 \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 \u0648 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0634\u0631\u0627\u06cc\u0637 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0634\u0648\u0646\u062f.\n\n\ud83c\udfa4\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 0.9.6 \u062a\u0627 1.31.2 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc NGINX 1.30.4\u060c 1.31.3 \u0648 NGINX Plus 37.0.3.1 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u067e\u0698\u0648\u0647\u0634\u06af\u0631\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0632 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627 \u062e\u0648\u0627\u0633\u062a\u0647\u200c\u0627\u0646\u062f \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0646\u0633\u0628\u062a \u0628\u0647 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u062e\u0648\u062f \u0627\u0642\u062f\u0627\u0645 \u06a9\u0646\u0646\u062f.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-23T00:00:22.484951Z"}, {"uuid": "51c97c2d-9084-4632-9788-50a9f6c023eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/GithubRedTeam/94803", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533-nginx\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 10:25:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-42533 Nginx\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T12:00:03.234961Z"}, {"uuid": "f111e1f9-a137-41f5-b765-db98cce29181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94803", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533-nginx\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 10:25:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-42533 Nginx\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:08.524590Z"}, {"uuid": "ada49bc3-3668-4407-9046-1f25ab9e2d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/chrisshort.net/post/3mrfo6j7asc2s", "content": "15-Year-Old Pre-Auth nginx RCE Across 13 Call Sites: Two-Pass Capture Clobbering CVE-2026-42533 \u2013 cyberstan #devopsish cyberstan.co.uk/ngin...", "creation_timestamp": "2026-07-24T15:29:14.757272Z"}, {"uuid": "6cecdaa3-5551-437b-bf1f-b35212702865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/116975662110531360", "content": "15-Year-Old Pre-Auth nginx RCE Across 13 Call Sites: Two-Pass Capture Clobbering CVE-2026-42533 \u2013 cyberstan #devopsish https://cyberstan.co.uk/nginx-rce/", "creation_timestamp": "2026-07-24T15:29:15.131696Z"}, {"uuid": "f289952a-b3dc-4c68-bad7-fb7e4b29f977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116985949937007253", "content": "PoC's for nginx RCE (CVE-2026-42530, CVE-2026-42533) https://github.com/DepthFirstDisclosures/Nginx-Rift/", "creation_timestamp": "2026-07-26T11:05:33.907301Z"}, {"uuid": "449fb524-67ab-45fd-97cd-8586c7d5378f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mrkaezrr7ae2", "content": "PoC's for nginx RCE (CVE-2026-42530, CVE-2026-42533) https://github.com/DepthFirstDisclosures/Nginx-Rift/", "creation_timestamp": "2026-07-26T11:05:42.204050Z"}, {"uuid": "29df481e-baf5-4f9b-875d-ad9d7fd71fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mrkimwutu32e", "content": "Critical nginx flaw (CVE-2026-42533): a crafted HTTP request can overflow the worker heap and crash it\u2014RCE is possible where ASLR is weak. Affects regex map configs. Patched in 1.30.4/1.31.3. Update now. \ud83d\udee1\ufe0f #nginx #Security #Linux", "creation_timestamp": "2026-07-26T13:33:15.492188Z"}, {"uuid": "1bc32992-00be-429d-9cbc-c6cc643c11cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/GithubRedTeam/95338", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 08:03:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nnginx heap buffer overflow PoC \u2014 CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-27T10:00:04.724790Z"}, {"uuid": "a1f42135-4752-4851-a748-e38308aefdf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/jZonNK9LGM_SvoC2Djs86LRDYxmpyv3NgFItsHIOxESbAXI", "content": "", "creation_timestamp": "2026-07-27T21:00:03.739462Z"}, {"uuid": "89baf71f-d834-4761-8c3a-1057343caa8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/7YKERi0HkdGPkFWoPqK0HlDRQTb5XVkOUaBEBQpAE8HwXcw", "content": "", "creation_timestamp": "2026-07-27T21:00:03.867967Z"}, {"uuid": "620a1617-dd94-4617-ae2f-38744d86f7a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "Telegram/jZonNK9LGM_SvoC2Djs86LRDYxmpyv3NgFItsHIOxESbAXI", "content": "", "creation_timestamp": "2026-07-28T00:00:10.161805Z"}, {"uuid": "81cd22f4-030c-43a8-bee7-8945634083d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "Telegram/7YKERi0HkdGPkFWoPqK0HlDRQTb5XVkOUaBEBQpAE8HwXcw", "content": "", "creation_timestamp": "2026-07-28T00:00:09.979091Z"}, {"uuid": "51339d0e-bb21-4784-9da9-7530be98c218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95338", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 08:03:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nnginx heap buffer overflow PoC \u2014 CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T00:00:37.727744Z"}, {"uuid": "96a94e70-77e0-466f-ac76-d4c72e9699c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/GithubRedTeam/95482", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a NGINX_2026_CVE_Bundle_CTI_Report\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChPratik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 07:35:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCovered CVEs: CVE-2026-28755, CVE-2026-42926, CVE-2026-9256, CVE-2026-42055, CVE-2026-42533\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T10:00:04.695904Z"}, {"uuid": "16a78cae-c37f-4ee9-85ce-5e217e24bab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrphvln22t2w", "content": "A public PoC now details CVE-2026-42533, an NGINX heap overflow with an ASLR bypass and possible RCE. Upgrade to NGINX 1.31.3 or 1.30.4 now.\n\n#NGINX #CVE202642533 #RCE #HeapOverflow #ASLRBypass #NGINXPlus #PoC #Cybersecurity", "creation_timestamp": "2026-07-28T13:03:30.504401Z"}, {"uuid": "93ec3dc7-a96e-4a5a-94eb-aa1a095c5747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrpvdfjnod2r", "content": "Critical NGINX vulnerability CVE-2026-42533 allows remote code execution; patch immediately. #NGINX #CVE202642533 #CyberSecurity #Vulnerability #RemoteCodeExecution #PatchNow thedailytechfeed.com/critical-ngi...", "creation_timestamp": "2026-07-28T17:03:52.826862Z"}, {"uuid": "c997bfdd-274d-4fca-a988-526736c733e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/thehackernews/9639", "content": "\ud83d\udea8 UPDATE - Public PoC exploit released for CVE-2026-42533, chaining an #nginx memory leak and heap overflow to bypass ASLR and achieve unauthenticated command execution.\n\nRead: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-28T19:00:04.627759Z"}, {"uuid": "4e2d4e4e-f0ea-46c4-b2b4-5384d54e44fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9639", "content": "\ud83d\udea8 UPDATE - Public PoC exploit released for CVE-2026-42533, chaining an #nginx memory leak and heap overflow to bypass ASLR and achieve unauthenticated command execution.\n\nRead: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-29T00:00:27.991058Z"}, {"uuid": "56dd6871-22e7-4ac4-9bb8-b3923583ad6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/GithubRedTeam/95482", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a NGINX_2026_CVE_Bundle_CTI_Report\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChPratik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 07:35:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCovered CVEs: CVE-2026-28755, CVE-2026-42926, CVE-2026-9256, CVE-2026-42055, CVE-2026-42533\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-29T00:00:39.360220Z"}, {"uuid": "2d299eb2-d9fb-4bb6-800c-205da7a721bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mrr6qxl6i52z", "content": "Critical NGINX Zero-Day Exposes Millions of Servers: CVE-2026-42533 Opens the Door to Pre-Authentication Remote Code\u00a0Execution\n\nIntroduction: Another Major Security Wake-Up Call for Internet Infrastructure NGINX remains one of the Security researchers have now disclosed CVE-2026-42533, a severe\u2026", "creation_timestamp": "2026-07-29T05:25:11.275238Z"}, {"uuid": "e1d0574c-b6fe-4e8b-9d68-e629ae891dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-19", "content": "", "creation_timestamp": "2026-07-29T12:15:21.035935Z"}, {"uuid": "8c098a5f-7f00-4be5-a24f-d5c276d6b0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42533", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mrt2t5ckdc2d", "content": "Wednesday\u2019s fuck up - this Time Nginx (which in itself is a great rarity, since the company is not a supporter of public disclosure of vulnerabilities) - github.com/imbas007/cve... I checked, the PoC works on version 1.17, valid! #nginx #exploit #poc #cve-2026-42533 #redteam #vulnerable", "creation_timestamp": "2026-07-29T13:20:31.642939Z"}, {"uuid": "afb81d9d-480d-481b-902a-222937712b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/angie_software/176", "content": "\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Angie \u0438 Angie PRO 1.12.1 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u043d\u0435\u0435 \u0432 nginx.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0438\u0437 \n\u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0435 \"map\" (CVE-2026-42533 \u0438 CVE-2026-60005), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0434\u0443\u043b\u044f SSI (CVE-2026-56434).\n\n\u0415\u0449\u0451 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043c\u0435\u0442\u0440\u0438\u043a (Metric) \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0435 \u043f\u043e \u043d\u0430\u0438\u043c\u0435\u043d\u044c\u0448\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043e\u0442\u0432\u0435\u0442\u0430 (least_time).\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Angie \u0438 Angie PRO.\n\nP.S.\n\u0421\u043f\u0430\u0441\u0438\u0431\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0443, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u0430\u043b\u0438 \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 \u043c\u0435\u0442\u0440\u0438\u043a. \n\u0412\u044b \u2014 \u043b\u0443\u0447\u0448\u0438\u0435! \ud83e\udd70", "creation_timestamp": "2026-08-30T00:00:53.722986Z"}, {"uuid": "c8a5a90b-29ba-48f7-8f78-5a0266c57915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100427", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-42533\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a FranklinF25\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 20:29:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-31T00:00:08.229301Z"}, {"uuid": "8c041c43-fd67-4a0a-a62b-0d3698649e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/MrVGunz/1397", "content": "\ud83d\udea8 Critical NGINX Vulnerability Enables Remote Code Execution\n\u0634\u0631\u06a9\u062a F5 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 NGINX \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-42533 \u0648 \u0627\u0645\u062a\u06cc\u0627\u0632 9.2 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\ud83d\udd0d \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u060c \u0628\u0627\u0639\u062b \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 \u0648 \u062f\u0631 \u0634\u0631\u0627\u06cc\u0637 \u062e\u0627\u0635 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0634\u0648\u0646\u062f.\n\u26a0\ufe0f \u062c\u0632\u0626\u06cc\u0627\u062a \u0645\u0647\u0645:\n\u2705 \u0645\u062d\u062f\u0648\u062f\u0647 \u062a\u0623\u062b\u06cc\u0631: \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 0.9.6 \u062a\u0627 1.31.2\n\u2705 \u0634\u062f\u062a: \u0628\u062d\u0631\u0627\u0646\u06cc (CVSS 9.2)\n\u2705 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u062f\u0631: NGINX 1.30.4\u060c 1.31.3 \u0648 NGINX Plus 37.0.3.1\n\ud83d\udee1 \u0646\u06a9\u062a\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc\n\u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u0631\u0648\u0631\u0647\u0627 \u0628\u0627\u06cc\u062f \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 NGINX \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u0627\u06cc\u0646\u062a\u0631\u0646\u062a\u06cc \u0631\u0627 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0645\u062f\u0627\u0648\u0645 \u067e\u0627\u06cc\u0634 \u06a9\u0646\u0646\u062f.\n\n#NGINX #CVE #RCE #WebSecurity #CyberSecurity\n@MrVGunz", "creation_timestamp": "2026-09-02T17:00:06.227861Z"}, {"uuid": "0997fa1e-5ca6-4f6a-9d04-a54c5a52bd11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/proxy_bar/3582", "content": "CVE-2026-42533 Nginx\n*\nheap buffer overflow PoC", "creation_timestamp": "2026-09-02T18:00:06.190788Z"}, {"uuid": "835bbc61-a0a3-4832-a6cc-33b7ec62d695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3582", "content": "CVE-2026-42533 Nginx\n*\nheap buffer overflow PoC", "creation_timestamp": "2026-09-03T00:00:39.887720Z"}, {"uuid": "7d45fa9e-c18c-4827-b5e5-171700de338f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/MrVGunz/1397", "content": "\ud83d\udea8 Critical NGINX Vulnerability Enables Remote Code Execution\n\u0634\u0631\u06a9\u062a F5 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 NGINX \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-42533 \u0648 \u0627\u0645\u062a\u06cc\u0627\u0632 9.2 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\ud83d\udd0d \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u060c \u0628\u0627\u0639\u062b \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 \u0648 \u062f\u0631 \u0634\u0631\u0627\u06cc\u0637 \u062e\u0627\u0635 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0634\u0648\u0646\u062f.\n\u26a0\ufe0f \u062c\u0632\u0626\u06cc\u0627\u062a \u0645\u0647\u0645:\n\u2705 \u0645\u062d\u062f\u0648\u062f\u0647 \u062a\u0623\u062b\u06cc\u0631: \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 0.9.6 \u062a\u0627 1.31.2\n\u2705 \u0634\u062f\u062a: \u0628\u062d\u0631\u0627\u0646\u06cc (CVSS 9.2)\n\u2705 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u062f\u0631: NGINX 1.30.4\u060c 1.31.3 \u0648 NGINX Plus 37.0.3.1\n\ud83d\udee1 \u0646\u06a9\u062a\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc\n\u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u0631\u0648\u0631\u0647\u0627 \u0628\u0627\u06cc\u062f \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 NGINX \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u0627\u06cc\u0646\u062a\u0631\u0646\u062a\u06cc \u0631\u0627 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0645\u062f\u0627\u0648\u0645 \u067e\u0627\u06cc\u0634 \u06a9\u0646\u0646\u062f.\n\n#NGINX #CVE #RCE #WebSecurity #CyberSecurity\n@MrVGunz", "creation_timestamp": "2026-09-03T00:00:41.051976Z"}, {"uuid": "bf29347f-e5dd-4cef-90ee-9e26edeb31cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "Telegram/wM44PB7rs9Na_M_NX9_ZEY8E_RYf0GtNF8Am5ZddqV3Wors", "content": "", "creation_timestamp": "2026-09-03T08:00:04.443039Z"}, {"uuid": "ebd271b5-1788-48d2-827d-bb813c350a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "Telegram/YbRfKEk-IIx1_FMexJ4nj8bwYW1jgQhXCn7l7xzen7fZZLk", "content": "", "creation_timestamp": "2026-09-03T08:00:04.756793Z"}, {"uuid": "7529372d-9cbd-49f2-8117-d1e40f808690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "Telegram/wM44PB7rs9Na_M_NX9_ZEY8E_RYf0GtNF8Am5ZddqV3Wors", "content": "", "creation_timestamp": "2026-09-04T00:00:56.946491Z"}, {"uuid": "b9207903-9ee0-4f31-b797-65f251253b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "Telegram/YbRfKEk-IIx1_FMexJ4nj8bwYW1jgQhXCn7l7xzen7fZZLk", "content": "", "creation_timestamp": "2026-09-04T00:00:57.504855Z"}, {"uuid": "cbc08068-d72c-424d-8980-99dcd2828d1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mup2o544l22r", "content": "F5\u304cNGINX\u306e3\u3064\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3002\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3001\u30e1\u30e2\u30ea\u6f0f\u6d29\u3001DoS\u653b\u6483\u306e\u53ef\u80fd\u6027\u3092\u793a\u5506\n\nF5\u306f\u3001NGINX Plus\u304a\u3088\u3073NGINX Open Source\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b3\u3064\u306e\u8106\u5f31\u6027\u306b\u95a2\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u52e7\u544a\u3092\u767a\u8868\u3057\u307e\u3057\u305f\u3002\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u30ef\u30fc\u30ab\u30fc\u30d7\u30ed\u30bb\u30b9\u3067\u30af\u30e9\u30c3\u30b7\u30e5\u3092\u5f15\u304d\u8d77\u3053\u3057\u305f\u308a\u3001\u9650\u5b9a\u7684\u306a\u30e1\u30e2\u30ea\u5185\u5bb9\u3092\u6f0f\u6d29\u3055\u305b\u305f\u308a\u3001\u7279\u5b9a\u306e\u6761\u4ef6\u4e0b\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3057\u305f\u308a\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\nCVE-2026-56434\u3001CVE-2026-42533\u3001\u304a\u3088\u3073CVE-2026-60005\u3068\u3057\u3066\u7279\u5b9a\u3055\u308c\u305f\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306f\u3001NGINX\u306e\u5236\u5fa1\u30d7\u30ec\u30fc\u30f3\u3067\u306f\u306a\u304f\u3001\u30c7\u30fc\u30bf\u30d7\u30ec\u30fc\u30f3\u306e...", "creation_timestamp": "2026-09-04T13:22:17.186665Z"}, {"uuid": "8d889cd9-9e4f-4267-a082-db3f8cb1cd69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mup2pkby5k2r", "content": "\u300cnginx\u300d\u306b\u8907\u6570\u8106\u5f31\u6027\u3001\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3082 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\n\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u300cnginx\u300d\u306e\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670815\u65e5\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u3078\u5bfe\u51e6\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08Critical\uff09\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u306b\u3082\u5bfe\u51e6\u3057\u3066\u3044\u308b\u3002\n\nF5\u306f\u73fe\u5730\u6642\u95937\u670815\u65e5\u306b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-42533\u300d\u300cCVE-2026-60005\u300d\u300cCVE-2026-56434\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u6709\u511f\u7248\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u7248\u306e\u3044\u305a\u308c\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\n\u300cCVE-2026-42533\u300d\u306f\u3001\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u300cmap\u300d\u30c7\u30a3\u30ec\u30af...", "creation_timestamp": "2026-09-04T13:23:04.498597Z"}]}