{"vulnerability": "cve-2026-4253", "sightings": [{"uuid": "38bb3b83-79a1-40bd-9232-067f85e9e926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42539", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7rh74g2w2u", "content": "[SBA-ADV-20260126-04] CVE-2026-42539: DFIR-IRIS before 2.4.28 Excessive Data Exposure", "creation_timestamp": "2026-05-19T16:05:50.806386Z"}, {"uuid": "3a0e6d1c-fa1d-46c3-ae72-1ce5d7389e60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42534", "type": "seen", "source": "https://social.nlnetlabs.nl/users/nlnetlabs/statuses/116606458492280712", "content": "\ud83d\udea8 SECURITY RELEASE \ud83d\udea8Today we released Unbound 1.25.1, which consolidates security fixes for issues reported over a period of time. \nThere are fixes for CVE-2026-33278, CVE-2026-42944, CVE-2026-42959, CVE-2026-32792, CVE-2026-40622, CVE-2026-41292, CVE-2026-42534, CVE-2026-42923, CVE-2026-42960, CVE-2026-44390 and CVE-2026-44608.\nPlease read the release notes carefully and plan to upgrade. \n#DNS #DNSSEC #Mythos #LLM #OpenSource \nhttps://community.nlnetlabs.nl/t/unbound-1-25-1-released/3392", "creation_timestamp": "2026-05-20T10:36:25.372758Z"}, {"uuid": "c53b3b6f-c7c1-4184-a776-83581017db39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42534", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmbps2tve32k", "content": "CVE-2026-42534 - Jostle logic bypass degrades resolution performance\nCVE ID : CVE-2026-42534\n \n Published : May 20, 2026, 9:19 a.m. | 55\u00a0minutes ago\n \n Description : NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat...", "creation_timestamp": "2026-05-20T10:41:27.315283Z"}, {"uuid": "20589264-fc65-4662-ac47-e30311eee891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42538", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnip5nee5r2q", "content": "CVE-2026-42538 - IRIS has an Insecure File Upload\nCVE ID : CVE-2026-42538\n \n Published : June 4, 2026, 9:16 p.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Version...", "creation_timestamp": "2026-06-04T22:43:51.963879Z"}, {"uuid": "f3810443-42be-41f1-b0a2-e2b1473093ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42539", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnirkk6m7z2f", "content": "CVE-2026-42539 - IRIS has an Excessive Data Exposure issue\nCVE ID : CVE-2026-42539\n \n Published : June 4, 2026, 10:16 p.m. | 14\u00a0minutes ago\n \n Description : IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versi...", "creation_timestamp": "2026-06-04T23:26:52.462499Z"}, {"uuid": "c3dd2f19-a6cb-44eb-89ab-48be53bb7047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42536", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnsolmbovy2r", "content": "CVE-2026-42536: Apache HTTP Server: mod_xml2enc heap overflow", "creation_timestamp": "2026-06-08T22:00:24.460020Z"}, {"uuid": "0de60ea2-1570-4bf3-97d8-b9f6babbcf30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42536", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnsrxlori626", "content": "\ud83d\udfe0 CVE-2026-42536 - High (7.5)\n\nHeap-based Buffer Overflow vulnerability in Apache HTTP Server with\u00a0mod_xml2enc, xml2StartParse,...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42536/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-08T23:00:48.440763Z"}, {"uuid": "5983b7bc-a11a-4069-a3d2-db415d8e2a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42536", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-apache-http-server", "content": "", "creation_timestamp": "2026-06-09T00:51:01.000000Z"}, {"uuid": "0297db51-7da4-46a5-ab47-6c8f62a00ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42535", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mnu2uq6ygc2l", "content": "SIOS\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d6\u30ed\u30b0\u3092\u66f4\u65b0\u3057\u307e\u3057\u305f\u3002\n\nApache\u306e\u8106\u5f31\u6027(Moderate: CVE-2026-34355, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186, CVE-2026-49975, Low:\u8907\u6570)\u30682.4.68\u30ea\u30ea\u30fc\u30b9\n\n#sios_tech #security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #apache \n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-06-09T11:12:57.609193Z"}, {"uuid": "4444c190-a217-4ce8-8cb0-1938f4de718c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42535", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu7hq6yhy25", "content": "\ud83d\udd17 CVE : CVE-2026-29167, CVE-2026-29170, CVE-2026-34355, CVE-2026-34356, CVE-2026-42535, CVE-2026-42536, CVE-2026-43951, CVE-2026-44119, CVE-2026-44185, CVE-2026-44186, CVE-2026-44631, CVE-2026-48913, CVE-2026-49975", "creation_timestamp": "2026-06-09T12:35:08.846237Z"}, {"uuid": "4aca07ff-47d5-4ebe-9c08-c226ec7fc73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42536", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu7hq6yhy25", "content": "\ud83d\udd17 CVE : CVE-2026-29167, CVE-2026-29170, CVE-2026-34355, CVE-2026-34356, CVE-2026-42535, CVE-2026-42536, CVE-2026-43951, CVE-2026-44119, CVE-2026-44185, CVE-2026-44186, CVE-2026-44631, CVE-2026-48913, CVE-2026-49975", "creation_timestamp": "2026-06-09T12:35:09.036728Z"}, {"uuid": "bfe70b52-3425-4f80-aab9-bdd16f48c3a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42535", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apache-http-server-multiple-vulnerabilities_20260610", "content": "", "creation_timestamp": "2026-06-09T18:00:00.000000Z"}, {"uuid": "5caa4d50-421b-4bf3-8302-d1835b6198ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42536", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apache-http-server-multiple-vulnerabilities_20260610", "content": "", "creation_timestamp": "2026-06-09T18:00:00.000000Z"}, {"uuid": "f83d827f-074f-499c-ba98-94755e44593b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moivbi45fe2b", "content": "CVE-2026-42530 - NGINX Open-Source ngx_http_v3_module vulnerability\nCVE ID : CVE-2026-42530\n \n Published : June 17, 2026, 2:04 p.m. | 3\u00a0hours, 4\u00a0minutes ago\n \n Description : NGINX Open Source has a vulnerability in the ngx_http_v3_module\u00a0module. When NGINX Open Source is confi...", "creation_timestamp": "2026-06-17T17:58:34.658348Z"}, {"uuid": "e87e9347-172c-474c-a0f6-66dfd79ebd3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3moivjizel522", "content": "\ud83d\udcf0 CVE-2026-42530: Nginx 1.30.2 and Nginx 1.31.2\n\nDetails for CVE-2026-42530, potentially affecting Nginx versions 1.30.2 and 1.31.2, are not accessible in the provided content. The article consis...\n\nhttps://tinyurl.com/28yq6x9p #TechNews #CrustyTLDR", "creation_timestamp": "2026-06-17T18:03:06.266969Z"}, {"uuid": "4ef1dd73-70c2-49c4-8811-6cbed306a0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1927", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}, {"uuid": "572e4709-0f79-4a8a-93b2-924175f5e0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1929", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}, {"uuid": "4ff3409d-48c7-48e8-860f-6b3709d9d596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mokvn4bbjd2j", "content": "\ud83d\udd17 CVE : CVE-2026-42055, CVE-2026-42530, CVE-2026-48142", "creation_timestamp": "2026-06-18T13:10:33.453997Z"}, {"uuid": "ad783868-21b7-45d7-9ec6-836f5a6baaca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3mokx4lsc7y2t", "content": "CVE-2026-42530: Use after free in nginx HTTP/3 QUIC module\nDiscussion | lobsters | Author: jmillikin", "creation_timestamp": "2026-06-18T13:36:57.771784Z"}, {"uuid": "cef1f80c-0d20-479c-8b74-788797a51e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/lobsters-feed.bsky.social/post/3mokxc53qwe24", "content": "CVE-2026-42530: Use after free in nginx HTTP/3 QUIC module https://lobste.rs/s/pbvqlz #security ", "creation_timestamp": "2026-06-18T13:40:03.778259Z"}, {"uuid": "075e6891-453a-4faa-bb2b-2b6865159f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116771677218326138", "content": "A lot of offensive activities were identified targeting F5 NGINX Open Source (CVE-2026-42530) https://vuldb.com/vuln/372026/cti", "creation_timestamp": "2026-06-18T14:53:11.555454Z"}, {"uuid": "69c89023-bacd-4ecd-8a19-bdad52eddd6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moln6rpwau2a", "content": "\ud83d\udea8 HIGH: CVE-2026-42530\n\nCVSS 8.1/10\n\n\ud83d\udccb WHAT IT IS:\nNGINX Open Source has a vulnerability in the ngx_http_v3_module. When NGINX is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This may cause a ", "creation_timestamp": "2026-06-18T20:11:53.447477Z"}, {"uuid": "028a0e1f-4853-431d-a4d7-ed2e80b3bef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3molqwn4o5k62", "content": "F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution TheHackerNews F5 fixes CVE-2026-42530 and CVE-2026-42055 in NGINX Open Source, addressing HTTP/3 and HTTP/2 flaws that...\n\n#Security #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-18T21:18:58.312124Z"}, {"uuid": "87fd2e13-dca5-4068-9b1f-74caaf19f276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3molsfz3p3b2n", "content": "F5 patched two critical NGINX Open Source flaws, CVE-2026-42530 and CVE-2026-42055, that could enable remote code execution in certain configs. Mitigations include disabling HTTP/3 or adjusting headers. #NGINX #F5 #CVE202642530", "creation_timestamp": "2026-06-18T21:45:25.963442Z"}, {"uuid": "d2dab024-e84e-49f6-aefe-f7bca62ff1bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "content": "F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve code execution on affected systems.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-42530 (CVSS v4 score: 9.2) - A use-after-free vulnerability in the ngx_http_v3_module that could be triggered by a remote unauthenticated attacker when NGINX Open Source is", "creation_timestamp": "2026-06-18T15:32:14.000000Z"}, {"uuid": "dd835f0d-fd16-4014-b644-76d872e7491b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/dju.eurosky.social/post/3molyw2ol3c2h", "content": "plusieurs CVE dans nginx\n\nCVE-2026-42530\nCVE-2026-42055\nCVE-2026-48142\n\nthehackernews.com/2026/06/f5-p...", "creation_timestamp": "2026-06-18T23:41:47.658712Z"}, {"uuid": "fcddc24c-0fad-4b40-89a4-52e0cb22a1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42530", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mompp6rrhu2b", "content": "Two 9.2s in stock NGINX: inside the HTTP/3 QPACK use-after-free and the gRPC heap overflow F5 just\u00a0patched\n\nF5 patched two critical NGINX flaws (CVSS 9.2): a QPACK use-after-free in HTTP/3 and a gRPC heap overflow. Full\u2026\n\nhttps://thecybersecguru.com/news/nginx-cve-2026-42530-cve-2026-42055-rce/", "creation_timestamp": "2026-06-19T06:29:31.707317Z"}, {"uuid": "fb1e197a-19c6-403c-b388-1adc725bcfd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42530", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3momr3spaum2v", "content": "\ud83d\udcf0 Picu Kerusakan Memori, F5 Rilis Patch Darurat Tutup Celah Kritis RCE pada NGINX\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/19/f5-rilis-patch-darurat-celah-kritis-nginx/\n\n#aslr #bufferOverflow #cve-2026-42055 #cve-2026-42530 #dos #f5 #http3 #nginx #outOfBand #patchDarurat ", "creation_timestamp": "2026-06-19T06:54:28.719189Z"}, {"uuid": "f13a347c-ff88-404e-b871-3b0b1d699dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3momtwvudts26", "content": "CVE-2026-42530 : NGINX Open Source has a vulnerability in the ngx_http_v3_module module. www.cve.org/CVERecord?id...", "creation_timestamp": "2026-06-19T07:45:25.311271Z"}, {"uuid": "a9c35470-6661-4673-9590-61ef0bd51960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "Telegram/1GsfOzUboS3JWnialEkr6Pf0VdQ2CZOxE9iogkqFyOsWag", "content": "", "creation_timestamp": "2026-06-18T18:39:43.000000Z"}, {"uuid": "faf1de6c-9861-4113-94f4-45280eba5c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3monc6t4ohu24", "content": "NGINX Open Source: F5 patched two critical remote code execution flaws, including CVE-2026-42530. Update NGINX promptly and verify versions across all hosts. #Cybersecurity #Vulnerability #CloudSecurity\n\nSource: https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "creation_timestamp": "2026-06-19T12:00:23.627322Z"}, {"uuid": "db454273-c696-4665-b4b6-6a9665935bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/116775720185561378", "content": "F5 Patches Critical Remote Code Execution Flaws in NGINX Open Source and Plus\nF5 addressed two critical vulnerabilities (CVE-2026-42530 and CVE-2026-42055) in NGINX that allow unauthenticated remote code execution or denial-of-service. The flaws affect NGINX Open Source, NGINX Plus, and several related gateway and controller products.\n**If you run NGINX (Open Source, Plus, Ingress Controller, Gateway Fabric, Instance Manager, or App Protect WAF), update immediately to the fixed versions F5 released: NGINX Open Source 1.31.2 or 1.30.3, and NGINX Plus 37.0.2.1 or R36 P6. If you can't patch right away, temporarily disable HTTP/3 by removing \"quic\" from all listen directives, and remove the \"ignore_invalid_headers off\" directive or shrink \"large_client_header_buffers\" to block these attacks until you update.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/f5-patches-critical-remote-code-execution-flaws-in-nginx-open-source-and-plus-q-l-g-f-a/gD2P6Ple2L", "creation_timestamp": "2026-06-19T13:20:05.850994Z"}, {"uuid": "62ea966c-9a8e-4737-967a-8aaa917156ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3monjucmz5s2h", "content": "F5 Patches Critical NGINX Vulnerabilities Enabling Unauthenticated Code Execution\n\nF5 released emergency updates for critical NGINX flaws (CVE-2026-42530, CVE-2026-42055) that could enable unauthenticated code execution. F5 has issued out-of-band patches for multiple NGINX vulnera\u2026\n#hackernews #news", "creation_timestamp": "2026-06-19T14:17:40.994156Z"}, {"uuid": "00b6b307-7f11-4e14-a88a-587dce6fd8ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3moory7o7bs2s", "content": "Friday fuck-up) this time F5-Nginx - The vulnerabilities have been assigned the identifiers CVE-2026-42530 and CVE-2026-42055 and received a CVSS score of 9.2. They allow an unauthenticated remote attacker to trigger a denial-of-service (DoS) condition or achieve arbitrary code execution.", "creation_timestamp": "2026-06-19T16:15:53.130998Z"}, {"uuid": "94685b2a-a351-41e7-b0d1-f0036834f8ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3moory7oj2c2s", "content": "Friday fuck-up) this time F5-Nginx - The vulnerabilities have been assigned the identifiers CVE-2026-42530 and CVE-2026-42055 and received a CVSS score of 9.2. They allow an unauthenticated remote attacker to trigger a denial-of-service (DoS) condition or achieve arbitrary code execution.", "creation_timestamp": "2026-06-19T16:15:54.954092Z"}, {"uuid": "905daf71-3a8f-418f-8eda-da2592f6390d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3moory7oly22s", "content": "Friday fuck-up) this time F5-Nginx - The vulnerabilities have been assigned the identifiers CVE-2026-42530 and CVE-2026-42055 and received a CVSS score of 9.2. They allow an unauthenticated remote attacker to trigger a denial-of-service (DoS) condition or achieve arbitrary code execution.", "creation_timestamp": "2026-06-19T16:15:56.815848Z"}, {"uuid": "bfd5507b-8375-44ce-abfe-dff569584faf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3moo3tu7caf2s", "content": "Use-after-free in the QPACK encoder of nginx HTTP/3 - CVE-2026-42530", "creation_timestamp": "2026-06-19T19:39:32.454313Z"}, {"uuid": "978e67c3-6215-478c-80b8-19a12555bfae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/kontronn.bsky.social/post/3mosijvo7222x", "content": "Nginx QUIC RCE Vulnerability CVE-2026-42530: Security Implications of HTTP/3 www.pudn.club/news/nginx-q...", "creation_timestamp": "2026-06-21T13:37:23.040427Z"}, {"uuid": "17e976ce-db30-4b86-a922-7b614c846cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmkxha2v2m", "content": "\ud83d\udea8  ALERT: CVE-2026-42530\n\nCVSS 8.1/10\n\n\ud83d\udccb WHAT IT IS:\nNGINX Open Source has a vulnerability in the ngx_http_v3_module. When NGINX is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This may cause ", "creation_timestamp": "2026-06-22T00:22:06.060030Z"}, {"uuid": "1c3a3d46-1081-4647-918c-c2b850193593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mourv4si7h22", "content": "F5 releases security updates for NGINX Open Source fixing CVE-2026-42530 (CVSS 9.2), a use-after-free flaw in ngx_http_v3_module that could allow remote code execution. Update now!", "creation_timestamp": "2026-06-22T11:29:55.861356Z"}, {"uuid": "aa1b4f73-b1f5-4ef4-96b5-8f9e2d6b9fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42530", "type": "seen", "source": "https://infosec.exchange/ap/users/116710323468652980/statuses/116794392691446150", "content": "F5 Patches Critical NGINX RCE Bugs CVE-2026-42530/42055\n\ud83d\udd17 https://cybersecurefox.com/en/f5-critical-nginx-vulnerabilities-cve-2026-42530-42055\n#F5 #NGINX #CVE-2026-42530 #CVE-2026-42055 #HTTP/3 #vulnerability", "creation_timestamp": "2026-06-22T15:15:11.546523Z"}, {"uuid": "833a709e-feb9-4444-9f39-ebd392787395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://gist.github.com/muhamedfazalps/a3449070789a6a2c13d4d4e844af803b", "content": "# \u26a0\ufe0f SECURITY ALERT: Multiple CVEs Affecting Popular Packages (June 2026)\n\n## CVE-2026-48931 \u2014 Node.js 24.17 / node-fetch Premature Close\n- **Impact:** Affects Node.js 24.17 and any app using node-fetch\n- **Severity:** High\n- **Affected:** Backstage (20\ud83d\udc4d issue), any Node.js app on 24.17\n- **Fix:** Update Node.js or apply backport\n- **Issue:** https://github.com/backstage/backstage/issues/34651\n\n## CVE-2026-54297 \u2014 Faraday Dependency Vulnerability\n- **Impact:** Affects Fastlane and apps using Faraday\n- **Severity:** High\n- **Affected:** Fastlane (9\ud83d\udc4d issue), any Ruby app using Faraday\n- **Fix:** Update Faraday dependency\n- **Issue:** https://github.com/fastlane/fastlane/issues/30086\n\n## CVE-2026-42530 & CVE-2026-42055 \u2014 nginx Vulnerabilities\n- **Impact:** Affects nginx and mailcow-dockerized\n- **Severity:** High\n- **Affected:** mailcow-dockerized (7\ud83d\udc4d issue), any nginx deployment\n- **Fix:** Update nginx to patched version\n- **Issue:** https://github.com/mailcow/mailcow-dockerized/issues/7299\n\n## js-yaml Quadratic DoS (v3.x)\n- **Impact:** Affects any app using js-yaml v3.x for YAML parsing\n- **Severity:** Medium-High\n- **Affected:** 15\ud83d\udc4d issue requesting backport from v4.2.0 to v3\n- **Fix:** Update to js-yaml v4.2.0+ or apply backport\n- **Issue:** https://github.com/nodeca/js-yaml/issues/762\n\n## How to Check If You're Affected\n1. Check your Node.js version: `node --version`\n2. Check your Ruby/Bundler dependencies: `bundle list | grep faraday`\n3. Check your nginx version: `nginx -v`\n4. Check your js-yaml version: `npm ls js-yaml`\n\n## What to Do\n1. Update affected dependencies immediately\n2. Review logs for suspicious activity\n3. Rotate credentials if exposure is suspected\n\n---\n*If this alert helped you: https://buymeacoffee.com/muhamedfazalps*\n", "creation_timestamp": "2026-06-23T13:41:44.000000Z"}, {"uuid": "2d5cf4f3-bc25-4ede-987d-841e5f068822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3moyakl54rp2v", "content": "F5 patches critical NGINX flaws enabling remote code execution. Security teams need to prioritise updates for CVE-2026-42530 and related vulnerabilities affecting open-source\u2026\n\nhttps://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html\n\n#cybersecurity #infosec", "creation_timestamp": "2026-06-23T20:30:27.147464Z"}, {"uuid": "b8c25301-46e5-469b-8b20-603dfd26a343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3mp2q6blryx2v", "content": "\ud83d\udce1 Two More Critical NGINX Vulnerabilities: CVE-2026-42530 and CVE-2026-42055", "creation_timestamp": "2026-06-24T20:15:13.908392Z"}, {"uuid": "0a286360-a736-4bac-8e18-a45db7af24fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-prodotti-nginix", "content": "", "creation_timestamp": "2026-06-25T16:45:32.604084Z"}, {"uuid": "27910c25-ea83-4287-9a29-d3984dec7567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42536", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppa4qprci2j", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-42536 \u0432 Apache HTTP Server: \u0443\u0433\u0440\u043e\u0437\u0430 heap-based \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\n\n\nhttps://kripta.biz/posts/6B46BDB9-EEB7-41BF-B8C7-80B59C0CB7D0", "creation_timestamp": "2026-07-02T23:53:57.082007Z"}, {"uuid": "3bdf9444-2b64-4531-824d-626d9d132bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42535", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuchdu73s2l", "content": "\u300cApache HTTPD\u300d\u306b\u8907\u6570\u8106\u5f31\u6027 - \u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3068\u306e\u8a55\u4fa1\u3082\n\n\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u300cApache HTTP Server\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u958b\u767a\u30c1\u30fc\u30e0\u306f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u63d0\u4f9b\u3057\u3066\u3044\u308b\u3002\n\n...\n\n\u4e00\u65b9\u3001\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u300cCVE-2026-29167\u300d\u300cCVE-2026-44631\u300d\u306b\u3064\u3044\u3066\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u3092\u300c9.8\u300d\u3001\u300cCVE-2026-42535\u300d\u3092\u300c9.1\u300d\u3068\u8a55\u4fa1\u3002", "creation_timestamp": "2026-07-05T00:18:58.375174Z"}, {"uuid": "fb8ce3ca-35ec-4a81-90d9-f4f0301cf1aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4253", "type": "seen", "source": "https://t.me/GithubRedTeam/90566", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-4253-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a renzi25031469\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-25 12:19:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNon-destructive vulnerability scanner for NGINX HTTP/3 (ngx_http_v3_module). It ONLY performs a safe probe: opens an HTTP/3 (QUIC) connection, sends a single HEAD request and inspects the `Server` response header. It NEVER attempts to reopen a QPACK encoder stream or trigger the use-after-free.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:18.574584Z"}, {"uuid": "4ef68d1d-48c0-4e6e-934a-175c27981009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/GithubRedTeam/89682", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42530\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a v4ltonn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 19:38:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nScanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP/3 QPACK encoder stream Use-After-Free (CVSS 9.2)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:22.828078Z"}, {"uuid": "8144a90e-12ba-412a-9ea4-78e5a4f39209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/GithubRedTeam/89690", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42530\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 20:54:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-42530\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:22.450002Z"}, {"uuid": "302e8b0c-efbe-4f2d-99ab-af75b8fcd6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4253", "type": "seen", "source": "https://t.me/GithubRedTeam/90566", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-4253-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a renzi25031469\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-25 12:19:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNon-destructive vulnerability scanner for NGINX HTTP/3 (ngx_http_v3_module). It ONLY performs a safe probe: opens an HTTP/3 (QUIC) connection, sends a single HEAD request and inspects the `Server` response header. It NEVER attempts to reopen a QPACK encoder stream or trigger the use-after-free.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:34.849099Z"}, {"uuid": "820a4440-2d09-4f60-a643-1287a1164969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/GithubRedTeam/89690", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42530\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 20:54:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-42530\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:38.260370Z"}, {"uuid": "745b9d69-3eec-4958-a9f5-c5edafe57010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/GithubRedTeam/89682", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42530\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a v4ltonn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 19:38:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nScanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP/3 QPACK encoder stream Use-After-Free (CVSS 9.2)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:38.619606Z"}, {"uuid": "cf7ad02d-006a-44e5-bc27-d6a335e37664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/bdufstecru/3257", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u044f ngx_http_v3_module HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX Open Source, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 NGINX Ingress Controller, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX Gateway Fabric, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 NGINX Instance Manager \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-08509\nCVE-2026-42530\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://my.f5.com/manage/s/article/K000161616", "creation_timestamp": "2026-07-14T01:00:06.023285Z"}, {"uuid": "031f8e77-cb90-48b2-a6dc-2b72b514fc30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89682", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42530\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a v4ltonn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 19:38:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nScanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP/3 QPACK encoder stream Use-After-Free (CVSS 9.2)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:17.836852Z"}, {"uuid": "d8bbb671-1a0f-4ea6-9d3c-d52f9535dcde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/GithubRedTeam/89690", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42530\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 20:54:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-42530\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:18.232641Z"}, {"uuid": "c26d8073-f9b8-43d4-a484-614128895a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4253", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90566", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-4253-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a renzi25031469\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-25 12:19:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNon-destructive vulnerability scanner for NGINX HTTP/3 (ngx_http_v3_module). It ONLY performs a safe probe: opens an HTTP/3 (QUIC) connection, sends a single HEAD request and inspects the `Server` response header. It NEVER attempts to reopen a QPACK encoder stream or trigger the use-after-free.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:21.197794Z"}, {"uuid": "93d5dde3-b822-4684-8f8a-4115bf882cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/bdufstecru/3257", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u044f ngx_http_v3_module HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX Open Source, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 NGINX Ingress Controller, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX Gateway Fabric, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 NGINX Instance Manager \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-08509\nCVE-2026-42530\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://my.f5.com/manage/s/article/K000161616", "creation_timestamp": "2026-07-15T00:00:34.478165Z"}, {"uuid": "850fa5dc-ae48-44a4-aaef-ff2b3324765f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/thehackernews/9278", "content": "\ud83d\udea8 Two critical NGINX flaws can lead to remote code execution.\n\nF5 has patched:\n\u2022 CVE-2026-42530 (HTTP/3 use-after-free)\n\u2022 CVE-2026-42055 (HTTP/2 heap buffer overflow)\n\nBoth require specific configurations and ASLR bypass conditions.\n\nDetails here \u2192 https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "creation_timestamp": "2026-07-15T12:00:04.674060Z"}, {"uuid": "d282b1d8-6d44-4cf2-a0d3-d2c381e3a0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/thehackernews/9290", "content": "Update: the critical NGINX flaws now have a clearer technical path.\n\nCVE-2026-42530 comes down to an HTTP/3 lifetime mismatch that can leave a freed stream pointer treated as valid.\n\nCVE-2026-42055 lets oversized HPACK data write past its buffer, causing unauthenticated worker crashes.\n\nPatch or apply mitigations.\n\nRead: https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "creation_timestamp": "2026-07-15T12:00:04.287507Z"}, {"uuid": "61eff754-6833-4f3c-b2f8-15e062127959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqp35imbr32a", "content": "CVE-2026-42533\nNGINX web servers are at risk of crashing or being exploited by attackers if they use a specific configuration. An attacker can send a specially crafted HTTP request, causing the server to restart or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-15T15:50:05.029977Z"}, {"uuid": "fd5fe5cc-fc57-4564-81ae-ac624f796f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/116925017337379554", "content": "That's a lot of Fixes introduced in: NONE.\nhttps://my.f5.com/manage/s/article/K000162097\n\nA vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable in a string expression under certain conditions. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. (CVE-2026-42533)\nhttps://my.f5.com/manage/s/article/K000162097", "creation_timestamp": "2026-07-15T16:49:36.478685Z"}, {"uuid": "1b087103-678b-4ec2-8882-cfabc2bb4b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpauojijv2m", "content": "CVE-2026-42533 - NGINX Map directive and Regex matching vulnerability\nCVE ID : CVE-2026-42533\n \n Published : July 15, 2026, 2:33 p.m. | 43\u00a0minutes ago\n \n Description : A vulnerability exists in NGINX Plus and NGINX Open Source when a map\u00a0directive uses regex matching and a str...", "creation_timestamp": "2026-07-15T17:32:31.803938Z"}, {"uuid": "fd658d13-ce45-42e4-8f0c-ed3b6ef5dd7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/selfhost.directory/post/3mqpcouovz52f", "content": "\ud83d\ude80 New #release \u00b7 NGINX release-1.30.4\n\nnginx-1.30.4 stable version has been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memor\u2026\n\nCheck and #self-host it \u2192 selfhost.directory/project/nginx#update-5055825\n\n#selfhost #selfhosted #homelab #opensource", "creation_timestamp": "2026-07-15T18:05:05.039133Z"}, {"uuid": "d6cb6435-19b0-422c-9db8-746b08a4aeba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqpi3q3fx22o", "content": "\u300cnginx\u300d\u306b\u8907\u6570\u306e\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\n\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u300cnginx\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u6709\u511f\u7248\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u7248\u306e\u3044\u305a\u308c\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\nF5\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670817\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-42055\u300d\u300cCVE-2026-42530\u300d\u300cCVE-2026-48142\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u300cCVE-2026-42055\u300d\u306f\u3001\u300cproxy\u300d\u300cgrpc\u300d\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u78ba\u8a8d\u3055\u308c\u305f\u30d2\u30fc\u30d7\u30d9\u30fc\u30b9\u306e\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u7279\u5b9a\u306e\u69cb\u6210\u3068\u3057\u305f\u5834\u5408\u306b\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\u60aa\u7528\u3055\u308c\u308b\u3068\u30ef\u30fc\u30ab\u30fc\u30d7\u30ed\u30bb\u30b9\u306e\u518d\u8d77\u52d5\u3092\u5f15\u304d\u8d77\u3053\u3057\u305f\u308a\u3001\u30e1\u30e2...", "creation_timestamp": "2026-07-15T19:41:45.356590Z"}, {"uuid": "58c70452-5f22-41cd-853d-a51a0bbe1bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqpji372sc2o", "content": "F5\u793e\u3001NGINX\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5e2f\u57df\u5916\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\n\n\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696d\u306eF5\u306f\u3001NGINX\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u30fc\u306e\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u3001\u5e2f\u57df\u5916\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\u3053\u308c\u306b\u306f\u3001\u653b\u6483\u8005\u304c\u8106\u5f31\u306a\u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u30012\u3064\u306e\u91cd\u5927\u306a\u6b20\u9665\u304c\u542b\u307e\u308c\u3066\u3044\u308b\u3002\n\n2\u3064\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306f\u3001ngx_http_v3_module\uff08CVE-2026-42530\uff09\u3068ngx_http_proxy_v2_module\u304a\u3088\u3073ngx_http_grpc_module\uff08CVE-2026-42055\uff09\u3067\u767a\u898b\u3055\u308c\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u4ee5...", "creation_timestamp": "2026-07-15T20:06:38.193612Z"}, {"uuid": "e5ecb463-4c09-425e-b3d0-b9677e75323e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9290", "content": "Update: the critical NGINX flaws now have a clearer technical path.\n\nCVE-2026-42530 comes down to an HTTP/3 lifetime mismatch that can leave a freed stream pointer treated as valid.\n\nCVE-2026-42055 lets oversized HPACK data write past its buffer, causing unauthenticated worker crashes.\n\nPatch or apply mitigations.\n\nRead: https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "creation_timestamp": "2026-07-16T00:00:10.681866Z"}, {"uuid": "357d7c6e-f325-443b-a7ec-0c2a3f17a166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/thehackernews/9278", "content": "\ud83d\udea8 Two critical NGINX flaws can lead to remote code execution.\n\nF5 has patched:\n\u2022 CVE-2026-42530 (HTTP/3 use-after-free)\n\u2022 CVE-2026-42055 (HTTP/2 heap buffer overflow)\n\nBoth require specific configurations and ASLR bypass conditions.\n\nDetails here \u2192 https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "creation_timestamp": "2026-07-16T01:00:06.287858Z"}, {"uuid": "5626e7e7-0605-4f8b-bf9b-ff0934afe5c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqq5jnrowx2a", "content": "F5 patched the NGINX code execution flaw CVE-2026-42533, along with CVE-2026-60005 and CVE-2026-56434. Update NGINX Plus and Open Source builds now.\n\n#NGINX #CVE202642533 #CodeExecution #F5 #Vulnerability", "creation_timestamp": "2026-07-16T02:05:21.284846Z"}, {"uuid": "b380de32-1dcc-4660-b4c3-7c34c829f231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mqqn6zxtcf22", "content": "F5 Patches High-Severity NGINX Vulnerabilities That Could Lead to Code\u00a0Execution\n\nF5 patches three high-severity NGINX vulnerabilities, including CVE-2026-42533, that could enable memory corruption, crashes, and code\u2026\n\nhttps://thecybersecguru.com/news/f5-nginx-vulnerabilities-code-execution/", "creation_timestamp": "2026-07-16T06:45:44.354072Z"}, {"uuid": "79860c2e-2130-4856-b568-2924c0c6d1bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc4ik4ie2t", "content": "\ud83d\udd17 CVE : CVE-2026-42533, CVE-2026-46333, CVE-2026-52865, CVE-2026-55723, CVE-2026-56434, CVE-2026-59762, CVE-2026-60005, CVE-2026-60062, CVE-2026-60065", "creation_timestamp": "2026-07-16T13:00:07.340450Z"}, {"uuid": "bf94b4a3-8ebd-4a07-9283-151ff3b69eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqrcfl6mb22y", "content": "F5\u793e\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308bNGINX\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u63d0\u4f9b\n\nF5\u306f\u3001\u8907\u6570\u306eNGINX\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5e2f\u57df\u5916\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u308c\u306b\u306f\u3001\u305d\u308c\u305e\u308cCVE-2026-42530\u304a\u3088\u3073CVE-2026-42055\uff08CVSS 9.2\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b2\u3064\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u542b\u307e\u308c\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u30d0\u30b0\u306fHTTP\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u60aa\u7528\u3055\u308c\u3001\u30e1\u30e2\u30ea\u7834\u640d\u3092\u5f15\u304d\u8d77\u3053\u3057\u3001\u30b5\u30fc\u30d3\u30b9\u306e\u518d\u8d77\u52d5\u3084\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\nCVE-2026-42530\uff08CVSS\u30b9\u30b3\u30a29.2\uff09\u306f\u3001NGINX\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306engx_http_v3_mod...", "creation_timestamp": "2026-07-16T13:05:14.308854Z"}, {"uuid": "f76e91c4-869b-4601-bb06-3bbf141a257a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqrdluvyp22y", "content": "F5\u793e\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308bNGINX\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306e\u91cd\u5927\u306a\u8106\u5f31\u60272\u4ef6\u3092\u4fee\u6b63\n\nF5\u306f\u3001NGINX\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u7248\u306b\u5b58\u5728\u3059\u308b2\u3064\u306e\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u308c\u3089\u306e\u6b20\u9665\u306f\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\u306a\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3057\u305f\u3002\n\n\u8106\u5f31\u6027\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-42530 (CVSS v4 \u30b9\u30b3\u30a2: 9.2) - ngx_http_v3_module \u306e use-after-free \u8106\u5f31\u6027\u3002NGINX Open Source \u304c HTTP/3 QUIC \u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u4f7f\u7528\u3057\u3066 QP...", "creation_timestamp": "2026-07-16T13:26:42.404334Z"}, {"uuid": "721a8ffb-11e8-4500-b0b0-cce7c5fb7654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mqrfi7yo4j2y", "content": "F5 issued an out-of-band patch for 8 NGINX and BIG-IP flaws, including CVE-2026-42533, a critical heap buffer overflow in NGINX Plus and Open Source, plus high-severity issues in Ingress Controller and BIG-IP. #NGINX #BIGIP #CVE202642533", "creation_timestamp": "2026-07-16T14:00:22.770755Z"}, {"uuid": "680efff5-2506-43c2-8ed5-e492da8d922f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mqrgpybos22c", "content": "\u26a0\ufe0f F5 patched 3 memory-safety flaws in NGINX incl. CVE-2026-42533 (CVSS 9.2) is a heap overflow via the map directive that crafted HTTP requests can trigger, with possible code exec if ASLR is off; plus an SSI use-after-free & a slice memory leak. Upgrade now to 1.31.3. Query: technology=\"Nginx\"", "creation_timestamp": "2026-07-16T14:22:42.001223Z"}, {"uuid": "5da057ef-3194-4b9c-89ab-1ffd7f4c554a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116930842661837024", "content": "Our CTI team identified a lot of activities targeting F5 NGINX Plus and NGINX Open Source (CVE-2026-42533) https://vuldb.com/vuln/379270/cti", "creation_timestamp": "2026-07-16T17:31:03.486418Z"}, {"uuid": "f5fee75f-ae7a-4ea4-9707-8ab57789d230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4253", "type": "seen", "source": "Telegram/NIC1pSer4wUaPF8vYCXT8yimUdczJT6s6FIEEKYD8WYc7m4", "content": "", "creation_timestamp": "2026-07-16T19:00:31.648495Z"}, {"uuid": "7d60cebf-459e-4183-876e-5abe60a56f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/true_secator/8417", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u043e\u043c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\nCVE-2026-53412 (CVSS 9,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0, Windows VDI Client \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u043b \u0435\u0433\u043e \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. Splunk \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. \u0418\u0437 \u043f\u044f\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u043b\u044f Splunk, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2026-20296 (\u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2026-20297 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438) \u0438 CVE-2026-20298 (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0445\u044d\u0448\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n3. F5 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 NGINX \u0438 BIG-IP.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-42533 (CVSS 9.2), \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 NGINX Plus \u0438 NGINX Open Source, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. F5 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n4. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro, ESET, Tenable \u0438 Tanium \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\nTenable\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Tenable Agent. CVE-2026-15265 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\nESET\u00a0\u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Inspect Connector \u0434\u043b\u044f Windows, \u0430 Tanium\u00a0- \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 DoS, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 Tanium Server.\n\nTrend Micro\u00a0\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cleaner One Pro \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b Trend Micro, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Bitdefender \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0443 \u0441\u0441\u044b\u043b\u043e\u043a Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 EDR.\n\n6. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Exchange Server (CVE-2026-42897, CVSS 8,1)\n\n7. \u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0435 Shark \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u044b \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430.\n\n8. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Node (npm) \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043f\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 AsyncAPI (\u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 2,25 \u043c\u043b\u043d.), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u043e\u044f\u043d \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-16T19:00:32.040737Z"}, {"uuid": "020b54f0-1f8a-493e-87e8-97da147b5c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4253", "type": "seen", "source": "Telegram/NIC1pSer4wUaPF8vYCXT8yimUdczJT6s6FIEEKYD8WYc7m4", "content": "", "creation_timestamp": "2026-07-17T00:00:48.535748Z"}, {"uuid": "b39ee94e-4ea1-47a0-ac24-bba6e4b23919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/true_secator/8417", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u043e\u043c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\nCVE-2026-53412 (CVSS 9,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0, Windows VDI Client \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u043b \u0435\u0433\u043e \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. Splunk \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. \u0418\u0437 \u043f\u044f\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u043b\u044f Splunk, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2026-20296 (\u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2026-20297 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438) \u0438 CVE-2026-20298 (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0445\u044d\u0448\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n3. F5 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 NGINX \u0438 BIG-IP.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-42533 (CVSS 9.2), \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 NGINX Plus \u0438 NGINX Open Source, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. F5 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n4. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro, ESET, Tenable \u0438 Tanium \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\nTenable\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Tenable Agent. CVE-2026-15265 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\nESET\u00a0\u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Inspect Connector \u0434\u043b\u044f Windows, \u0430 Tanium\u00a0- \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 DoS, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 Tanium Server.\n\nTrend Micro\u00a0\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cleaner One Pro \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b Trend Micro, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Bitdefender \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0443 \u0441\u0441\u044b\u043b\u043e\u043a Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 EDR.\n\n6. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Exchange Server (CVE-2026-42897, CVSS 8,1)\n\n7. \u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0435 Shark \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u044b \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430.\n\n8. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Node (npm) \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043f\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 AsyncAPI (\u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 2,25 \u043c\u043b\u043d.), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u043e\u044f\u043d \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-17T00:00:48.947097Z"}, {"uuid": "ef871d53-4264-4bad-bf64-5799ef523eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mqsh6qbxvr2p", "content": "HIGH severity CVE just published in nginx:\n\nCVE-2026-42533. A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-42533", "creation_timestamp": "2026-07-17T00:03:31.136676Z"}, {"uuid": "5e94e858-64aa-4e20-92f6-7e8cf3d15c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqswxbzsby2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-15409: 18 interactions\nCVE-2026-44747: 14 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46817: 5 interactions\nCVE-2026-20253: 4 interactions\nCVE-2026-42533: 4 interactions\n", "creation_timestamp": "2026-07-17T04:45:41.201733Z"}, {"uuid": "2c42ff41-84f5-4cc2-b69e-b9048f7a335d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqu2fohrzs2e", "content": "CVE-2026-42533 - nginx\nNGINX servers may leak sensitive configuration data. This can happen when attackers exploit a specific configuration setting. To protect your NGINX servers, review\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nginx #canonical #UbuntuPro1404LTS #CVE #infosec", "creation_timestamp": "2026-07-17T15:20:08.379725Z"}, {"uuid": "62d9c753-06db-4c84-aba4-5e36612e3473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4253", "type": "published-proof-of-concept", "source": "Telegram/NIC1pSer4wUaPF8vYCXT8yimUdczJT6s6FIEEKYD8WYc7m4", "content": "", "creation_timestamp": "2026-07-18T04:00:02.863371Z"}, {"uuid": "9fa388fb-6e8e-4103-97eb-18978ff26cd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4253", "type": "published-proof-of-concept", "source": "Telegram/NIC1pSer4wUaPF8vYCXT8yimUdczJT6s6FIEEKYD8WYc7m4", "content": "", "creation_timestamp": "2026-07-19T00:00:29.227034Z"}, {"uuid": "81216297-312c-4c11-91f1-7a649d8ecb15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mqzq7hvem62p", "content": "F5 shipped fixes for CVE-2026-42533, a configuration-dependent nginx heap buffer overflow enabling remote DoS and possible RCE under certain ASLR conditions.\n", "creation_timestamp": "2026-07-19T21:33:38.198453Z"}, {"uuid": "3d305c46-7af0-4d91-a276-815a9d34d36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mqzqclkdna2o", "content": "F5 patched a critical nginx heap buffer overflow (CVE-2026-42533) rated 9.2 on CVSS v4, affecting versions since 2011. The flaw [\u2026]", "creation_timestamp": "2026-07-19T21:35:22.390005Z"}, {"uuid": "e18a608c-9764-49ab-b7c3-d64d6a70c26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "content": "F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 (stable) and 1.31.3 (mainline), and in NGINX Plus 37.0.3.1; anyone on an earlier build should upgrade.\n\nTriggering it can crash or restart the worker, causing a denial of", "creation_timestamp": "2026-07-19T22:00:53.527644Z"}, {"uuid": "35e30b19-1292-47ff-ae08-4261cde3b980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9548", "content": "\ud83d\uded1 WARNING - A new critical NGINX vulnerability that has existed for 15-years lets unauthenticated attackers crash worker processes with crafted HTTP requests.\n\nCVE-2026-42533 affects specific regex map configurations.\n\nF5 says it may also allow pre-auth RCE if ASLR is disabled or bypassed.\n\nRead how the bug works: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-19T23:00:04.040564Z"}, {"uuid": "102a6691-48f0-4650-baab-80b70a5fc303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9547", "content": "\ud83d\uded1 WARNING - A new critical NGINX vulnerability that has existed for 15-years lets unauthenticated attackers crash worker processes with crafted HTTP requests.\n\nCVE-2026-42533 affects specific regex map configurations.\n\nF5 says it may also allow pre-auth RCE if ASLR is disabled or bypassed.\n\nRead how the bug works: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-19T23:00:04.080830Z"}, {"uuid": "df45532f-a35d-488e-b666-ce6797a6e521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mqzvtc2sho2s", "content": "\ud83e\udd16 CVE-2026-42533: Critical heap buffer overflow in NGINX. Unauthenticated remote attacker can crash workers or achieve RCE via crafted HTTP requests. Patched in nginx 1.30.4/1.31.3.\n\nhttps://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-19T23:14:11.646640Z"}, {"uuid": "542f2854-892b-47ca-ac44-3becb5c7fcec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9548", "content": "\ud83d\uded1 WARNING - A new critical NGINX vulnerability that has existed for 15-years lets unauthenticated attackers crash worker processes with crafted HTTP requests.\n\nCVE-2026-42533 affects specific regex map configurations.\n\nF5 says it may also allow pre-auth RCE if ASLR is disabled or bypassed.\n\nRead how the bug works: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-20T00:00:08.266377Z"}, {"uuid": "6a125037-1d1e-4491-a2c2-63e9dc0b59a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9547", "content": "\ud83d\uded1 WARNING - A new critical NGINX vulnerability that has existed for 15-years lets unauthenticated attackers crash worker processes with crafted HTTP requests.\n\nCVE-2026-42533 affects specific regex map configurations.\n\nF5 says it may also allow pre-auth RCE if ASLR is disabled or bypassed.\n\nRead how the bug works: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-20T00:00:08.303481Z"}, {"uuid": "1e74485e-8c4d-4837-b231-160bc65ebf1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mqzyi7fg2x2o", "content": "NGINX \u91cd\u5927\u8106\u5f31\u6027 CVE-2026-42533 \u304c\u30ef\u30fc\u30ab\u30fc\u30d7\u30ed\u30bb\u30b9\u3092\u30af\u30e9\u30c3\u30b7\u30e5\u3001RCE \u306e\u53ef\u80fd\u6027\n\nF5 \u304c\u6b63\u898f\u8868\u73fe\u30de\u30c3\u30d7\u306e\u30d2\u30fc\u30d7\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u8106\u5f31\u6027 CVE-2026-42533 \u3092\u4fee\u6b63\u3002nginx \u30ef\u30fc\u30ab\u30fc\u30d7\u30ed\u30bb\u30b9\u306e\u30af\u30e9\u30c3\u30b7\u30e5\u3068\u30b5\u30fc\u30d3\u30b9\u59a8\u5bb3\u304c\u78ba\u8a8d\u3055\u308c\u3066\u304a\u308a\u3001\u7279\u5b9a\u306e\u69cb\u6210\u74b0\u5883\u3067\u306f RCE \u306e\u53ef\u80fd\u6027\u3082\u6307\u6458\u3055\u308c\u3066\u3044\u308b\u3002\u65e9\u6025\u306a\u30d1\u30c3\u30c1\u9069\u7528\u304c\u63a8\u5968\u3055\u308c\u308b\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-07-20T00:01:40.990951Z"}, {"uuid": "b69ebf13-f0a2-4cc7-a9e4-62aaf5bfac45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "content": "F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 (stable) and 1.31.3 (mainline), and in NGINX Plus 37.0.3.1; anyone on an earlier build should upgrade.\n\nTriggering it can crash or restart the worker, causing a denial of", "creation_timestamp": "2026-07-20T01:00:37.847763Z"}, {"uuid": "b55b7f3f-aa5d-4a6a-9e1d-f5adc4238215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/GithubRedTeam/94232", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a nginx-map-risk-audit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a srkyn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 01:45:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDefensive NGINX CVE-2026-42533 map regex risk audit with config scanner, Splunk/Defender notes, and lab evidence.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T03:00:03.704852Z"}, {"uuid": "d14b34d7-5a7f-48f8-85d1-0875e187360f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mr2cx4hecz2n", "content": "CVE-2026-42533: Heap Buffer Overflow in NGINX Spans 15 Years of Versions", "creation_timestamp": "2026-07-20T03:08:59.010939Z"}, {"uuid": "18c3f72d-37c9-4e24-9804-89aedc495d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mr2f2dc5l423", "content": "Critical NGINX flaw CVE-2026-42533 allows remote code execution. Update now. #NGINX #CVE202642533 #CyberSecurity #RemoteCodeExecution #Vulnerability #PatchNow thedailytechfeed.com/15-year-old-...", "creation_timestamp": "2026-07-20T03:46:35.146417Z"}, {"uuid": "d746f3da-fd08-4bb0-a6ec-f1134a2bec8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mr2fsxdmxh2h", "content": "NGINX heap buffer overflow CVE-2026-42533 can be triggered by crafted HTTP requests to crash/restart worker, risking RCE. Upgrade to nginx 1.30.4/1.31.3 or NGINX Plus 37.0.3\u2026 #Cybersecurity #Vulnerability #InfoSec\n\nSource: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-07-20T04:00:20.423230Z"}, {"uuid": "12a07aa8-764a-4227-9fb9-6b4b9cd79a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42533", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mr2k2ymans27", "content": "Critical nginx Heap Overflow: Patch Now or Face Unauthenticated RCE Risk\n\nhttps://blindthoughts.com/nginx-heap-overflow-cve-2026-42533-patch\n\n#nginx #cve #webserver #remotecodeexecution #patchnow", "creation_timestamp": "2026-07-20T05:16:24.678669Z"}, {"uuid": "5ca7d02c-254e-4570-8235-1b2abfa56fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/alejandxr.bsky.social/post/3mr2lfaf5na2y", "content": "CVE-2026-42533 turns NGINX map directives into a heap overflow risk. If your routing maps handle unvalidated user input, you are exposing a direct memory corruption surface. Patching is the start, but auditing the input flow is the real fix.", "creation_timestamp": "2026-07-20T05:40:02.206420Z"}, {"uuid": "f3af9169-e56c-4f9e-9d69-9bafff3a87b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mr2qpdcvfc2i", "content": "F5 patches CVE-2026-42533, a regex map heap overflow that crashes nginx workers and may allow RCE in specific configurations.", "creation_timestamp": "2026-07-20T07:15:10.075090Z"}, {"uuid": "2e5b4bef-172c-4682-b8c1-1f36c26dd3b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/okeilv.bsky.social/post/3mr2rmvbixt2v", "content": "\ud83d\udea8 Nginx kritisk\u0101 k\u013c\u016bda CVE-2026-42533! Hakeri var p\u0101r\u0146emt serveri. Steidzami atjaunini versiju! #Nginx #dro\u0161\u012bba #IT Lasi vair\u0101k: https://okei.lv/kritiska-ievainojamiba-nginx-serveros-ka-sevi-pasargat/", "creation_timestamp": "2026-07-20T07:31:41.476972Z"}, {"uuid": "c12825f1-229b-47fa-b85b-c10f6261b23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/kerzinger.at/post/3mr2rwak7o22c", "content": "Eine neue Trending CVE (CVE-2026-42533, CVSS 9.2) betrifft NGINX Open Source und NGINX Plus. Details \ud83d\udc49 vulndex.at/cve/CVE-2026...\n\n#CVE #Vulnerability #nginx", "creation_timestamp": "2026-07-20T07:36:56.850990Z"}, {"uuid": "fca86eb0-0e44-49d6-aa3d-918d7225b820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/vulndex.at/post/3mr2rwrotdc2c", "content": "Eine neue Trending CVE (CVE-2026-42533, CVSS 9.2) betrifft NGINX Open Source und NGINX Plus. Details \ud83d\udc49 vulndex.at/cve/CVE-2026...\n\n#CVE #Vulnerability #nginx", "creation_timestamp": "2026-07-20T07:37:14.529393Z"}, {"uuid": "e9c21189-26d0-4ae1-8a61-3356d006ddca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/GithubRedTeam/94277", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-vagrant-box\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Daniyal48\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 08:11:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAn isolated Vagrant testbed designed to simulate a complete attack chain: Initial access via the Nginx heap buffer overflow (CVE-2026-42533) followed by root privilege escalation using the Ghostlock kernel vulnerability (CVE-2026-43449).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T10:00:04.871576Z"}, {"uuid": "4a5655eb-e1ed-4fab-a856-54c1976a9030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/ie-news.bsky.social/post/3mr2zwqhk232r", "content": "Active Exploitation Alert: Critical NGINX Vulnerabilities (CVE-2026-42533, CVE-2026-42945) Enable Remote Code Execution and Worker Crashes \u2013 Rescana\n\nhttps://www.europesays.com/ie/594826/\n\nExecutive Summary A critical vulnerability in NGINX\u00a0(CVE-2026-42533, also referenced as NGINX \u2026", "creation_timestamp": "2026-07-20T10:00:22.224630Z"}, {"uuid": "095a3a62-8fd6-4f65-977d-ba0bc8349eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr346oefwr24", "content": "CVE-2026-42533 Exposes Critical Pre-Auth nginx RCE Flaw", "creation_timestamp": "2026-07-20T10:40:35.446293Z"}, {"uuid": "633e47c9-ceac-4246-93b2-e54256d98dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116951958697276090", "content": "En las \u00faltimas 24 horas, se detectaron vulnerabilidades cr\u00edticas en WordPress, 7-Zip, Foxit PDF Reader y NGINX que permiten ejecuci\u00f3n remota de c\u00f3digo y escalada de privilegios, mientras una avanzada campa\u00f1a rusa con el RAT Starland intensifica amenazas; la actualizaci\u00f3n inmediata y la vigilancia continua son esenciales. Descubre estos y m\u00e1s detalles en el siguiente listado de noticias sobre seguridad inform\u00e1tica:\n\ud83d\uddde\ufe0f \u00daLTIMAS NOTICIAS EN SEGURIDAD INFORM\u00c1TICA \ud83d\udd12====| \ud83d\udd25 LO QUE DEBES SABER HOY \ufeff\ufeff20/07/26\ufeff\ufeff  \ud83d\udcc6 |==== \n\ud83d\udd13 EXPLOIT BROKERS PAGAN $500,000 POR UNA RCE EN WORDPRESS\nSe ha detectado una vulnerabilidad cr\u00edtica que permite la ejecuci\u00f3n remota de c\u00f3digo (RCE) en WordPress. La publicaci\u00f3n se retras\u00f3 estrat\u00e9gicamente para que los administradores pudieran actualizar sus sistemas sin riesgo durante el fin de semana. Si utilizas WordPress, es vital que verifiques la seguridad de tu instancia con la herramienta disponible en https://wp2shell.com/. Mantente alerta para proteger tu sitio frente a posibles ataques. M\u00e1s detalles y c\u00f3mo verificar tu seguridad aqu\u00ed \ud83d\udc49 https://djar.co/YsbS\n\ud83d\udee1\ufe0f NUEVA VULNERABILIDAD EN 7-ZIP PUEDE EJECUTAR C\u00d3DIGO AL EXTRAER ARCHIVOS XZ MANIPULADOS\nSe ha identificado CVE-2026-14266, un desbordamiento de pila de alta gravedad en el decodificador XZ de 7-Zip que permite la ejecuci\u00f3n remota de c\u00f3digo al abrir archivos comprimidos maliciosos. La versi\u00f3n 26.02 ya incluye el parche que corrige esta falla cr\u00edtica. Recomendamos actualizar inmediatamente para evitar compromisos de seguridad. Inf\u00f3rmate y actual\u00edzate aqu\u00ed \ud83d\udc49 https://djar.co/QRKdfM\n\u26a0\ufe0f ESCALADA DE PRIVILEGIOS EN FOXIT PDF READER PERMITE CONTROL TOTAL DEL SISTEMA\nUn grave fallo de seguridad (CVE-2026\u201357239) en Foxit PDF Reader permite a usuarios sin privilegios elevar permisos hasta NT AUTHORITY\\SYSTEM, otorgando control total sobre el sistema afectado. Esta vulnerabilidad pone en riesgo entornos corporativos y personales, por lo que actualizar y revisar las pol\u00edticas de seguridad es urgente. Conoce c\u00f3mo protegerte aqu\u00ed \ud83d\udc49 https://djar.co/r0Zuj\n\ud83d\udd25 CVE-2026-42533: FALLA CR\u00cdTICA EN NGINX PERMITE EJECUCI\u00d3N REMOTA DE C\u00d3DIGO\nF5 ha publicado un parche para corregir un bug muy serio en NGINX que puede provocar ca\u00eddas del servidor y, en casos extremos, ejecuci\u00f3n remota de c\u00f3digo mediante solicitudes HTTP manipuladas. Los administradores de sistemas deben aplicar esta actualizaci\u00f3n cuanto antes para evitar intrusiones y mantener la integridad de sus servicios web. Descubre los pasos para mitigar el riesgo aqu\u00ed \ud83d\udc49 https://djar.co/g35e9\n\ud83d\udea8 UAT-11795: NUEVO RAT STARLAND Y C2 PERSONALIZADO EN CAMPA\u00d1A FINANCIADA POR UN ADVERSARIO RUSO\nCisco Talos alerta sobre UAT-11795, una campa\u00f1a avanzada que utiliza el RAT Starland junto a un comando y control (C2) exclusivo, dirigida contra objetivos en EE. UU. y Europa desde junio de 2025. Este adversario sofisticado refuerza la necesidad de fortalecer la detecci\u00f3n y respuesta ante amenazas con vigilancia continua y soluciones actualizadas. Obt\u00e9n detalles para proteger tu entorno aqu\u00ed \ud83d\udc49 https://djar.co/zqN7\n\ud83d\udcc5 RESUMEN SEMANAL DE CIBERSEGURIDAD 13/07/26 - 19/07/26: DFIR Y TALLERES PR\u00c1CTICOS EN INCIBE\nLa semana pasada, Lorenzo Mart\u00ednez destac\u00f3 en el CyberSecurity Bootcamp 2026 organizado por INCIBE con su taller pr\u00e1ctico sobre DFIR (Digital Forensics and Incident Response), mostrando herramientas y artefactos esenciales para la respuesta ante incidentes. Este tipo de eventos fortalecen la comunidad y aumentan la preparaci\u00f3n frente a amenazas emergentes. Conoce m\u00e1s sobre el evento y recursos clave aqu\u00ed \ud83d\udc49 https://djar.co/qAu7M", "creation_timestamp": "2026-07-20T11:01:08.644843Z"}, {"uuid": "56955e70-c726-422e-8a03-0287b3b374ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr35sf2je62c", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers", "creation_timestamp": "2026-07-20T11:09:30.485246Z"}, {"uuid": "9d32affd-329c-405c-9dd4-7db9332fa234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mr36x2i5ks2s", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\n\nsecurityaffairs.com/195674/hacki...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "creation_timestamp": "2026-07-20T11:30:06.847572Z"}, {"uuid": "9cec15ad-04ee-4b43-bd89-325d1fa8e82a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mr37icdfno23", "content": "Une faille vieille de 15 ans d\u00e9couverte dans NGINX\n\n-> CVE-2026-42533\n\nCette faille de s\u00e9curit\u00e9 critique expose les serveurs Web \u00e0 un d\u00e9ni de service, et elle pourrait m\u00eame permettre une ex\u00e9cution de code \u00e0 distance. \n\nPlus d'infos\ud83d\udc47\n- www.it-connect.fr/nginx-cve-20...\n\n#nginx #infosec", "creation_timestamp": "2026-07-20T11:39:40.313102Z"}, {"uuid": "65b7fcdc-7952-412e-9cd7-95bb752b360f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mr3aa7bgfy2u", "content": "It seems we cannot even rely on our trusty web servers anymore, as F5 has scrambled to patch a rather terrifying heap buffer overflow in NGINX. This critical flaw, labeled CVE-2026-42533, compromises any web administrator running unpatched NGINX instances exposed to malicious HTT...\n\nRead full story", "creation_timestamp": "2026-07-20T11:53:01.659254Z"}, {"uuid": "c2775f4f-c970-4319-8e1d-90afbae2f4f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/ctinow/253597", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\nhttps://ift.tt/AJH05gL", "creation_timestamp": "2026-07-20T12:00:04.135712Z"}, {"uuid": "d3c049e9-ab4f-4e82-8e9c-dd8f9b43e560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/3WcCqL8vieXLsY-uvhRw4xP9N0uTGj-rYeNCRdz3eQJS5pzQ", "content": "", "creation_timestamp": "2026-07-20T12:00:04.245927Z"}, {"uuid": "2001c846-b631-4c2a-8155-54f711a7b876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42533", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116952420998772978", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers#CVE_2026_42533 https://securityaffairs.com/195674/hacking/cve-2026-42533-critical-nginx-bug-could-turn-http-requests-into-server-takeovers.html", "creation_timestamp": "2026-07-20T12:58:42.819811Z"}, {"uuid": "76f5109c-8521-45ff-8a1f-2910a40dd9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/mrviind.bsky.social/post/3mr3ek2453k2k", "content": "F5 patched CVE-2026-42533 on July 15. Risk depends on config and ASLR, not version. Flaw in nginx 0.9.6-1.31.2 since 2011. CVSS 9.2. Check regex map with capture variable in output.\n\nSource: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html\n\n#infosec #cve #techtrends #dig", "creation_timestamp": "2026-07-20T13:10:07.072590Z"}, {"uuid": "545d20a2-c33e-43ab-a9de-0554cbd80147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mr3rfw4yjy2u", "content": "Critical nginx heap buffer overflow allows unauthenticated RCE and DoS attacks. F5 patched CVE-2026-42533 on July 15\u2014if you're running an older build, update now.\n\nhttps://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html\n\n#cybersecurity #infosec", "creation_timestamp": "2026-07-20T17:00:27.197695Z"}, {"uuid": "b18d4ec4-bdc9-460d-b647-ceac2cb43b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/GithubRedTeam/94336", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533-Config-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xCyberstan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 6  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 15:15:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStatic config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture \u2192 heap overflow / info leak).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T18:00:04.441290Z"}, {"uuid": "172eab42-69b0-4dca-a082-4efc5f6481bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mr3yxpagxk2a", "content": "Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution\n\nF5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patch\u2026\n#hackernews #news", "creation_timestamp": "2026-07-20T19:15:39.885405Z"}, {"uuid": "db953ac0-a3b8-4029-a17c-616cee1680bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mr3zyvbuut23", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\n\nThis article focuses heavily on the potential for remote code execution based on ASLR bypass, yet it frames the immediate threat primarily as a denial-of-service issue caused by heap buffer overflows. Given that m\u2026", "creation_timestamp": "2026-07-20T19:34:13.840846Z"}, {"uuid": "9ad20455-68b5-4371-97fd-99260227c300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mr43kolruo2i", "content": "CVE-2026-42533: Critical NGINX Map Regex Flaw Can Trigger Heap Buffer Overflow and Possible RCE\n\nThe strongest version of this narrative is a necessary technical alert: a specific, high-impact vulnerability exists in a widely used piece of infrastructure, and the vendor has provided the fix. The\u2026", "creation_timestamp": "2026-07-20T20:02:04.758160Z"}, {"uuid": "4520b92b-ab5a-452e-9ba2-9cb6d896b222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mr4553o5sb2r", "content": "\ud83d\udce2 CVE-2026-42533 : RCE critique pr\u00e9-authentification dans nginx via heap overflow et fuite ASLR\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nPubli\u00e9 le 20 juillet 2026 p\u2026\nhttps://cyberveille.ch/posts/2026-07-20-cve-2026-42533-rce-critique-pre-authentification-dans-nginx-via-heap-overflow-et-fuite-aslr/ #ASLR_bypass #Cyberveille", "creation_timestamp": "2026-07-20T20:30:15.867334Z"}, {"uuid": "726c2982-877e-4ec2-b5c0-327286de9793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mr45pn4rn327", "content": "F5 has addressed a critical vulnerability (CVE-2026-42533) in nginx that allows remote, unauthenticated attackers to exploit a heap buffer overflow, potentially leading to denial of service or remote code execution. Patched on July 15, 2023, in nginx versions 1.30.4, 1.31.3, and NGINX Plus 37.0.3.", "creation_timestamp": "2026-07-20T20:40:38.511765Z"}, {"uuid": "6aa23eea-0d1f-493c-8c7d-da79d28f6830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/hatena-bookmark.bsky.social/post/3mr4g2yozck2h", "content": "#\ud83d\udd16\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\n2026\u5e747\u6708\u5831\u544a\u306enginx\u8106\u5f31\u6027\uff08CVE-2026-42533\uff09\u3092Docker\u3067\u518d\u73fe\u3057\u3066\u307f\u305f | DevelopersIO\n\n2026\u5e747\u670815\u65e5\u306b\u4fee\u6b63\u3055\u308c\u305fnginx\u306e\u8a8d\u8a3c\u524dRCE\u8106\u5f31\u6027 CVE-2026-42533\uff08CVSS 9.2\uff09\u306e\u52d5\u4f5c\u3092Docker\u30ed\u30fc\u30ab\u30eb\u74b0\u5883\u3067\u518d\u73fe\u3057\u307e\u3057\u305f\u3002Two-Pass\u30ad\u30e3\u30d7\u30c1\u30e3\u30af\u30ed\u30d0\u30ea\u30f3\u30b0\u306b\u3088\u308a\u30011\u56de\u306eGET\u30ea\u30af\u30a8\u30b9\u30c8\u3067\u30d2\u30fc\u30d7\u60c5\u5831\u304c\u6f0f\u6d29\u3059\u308b\u69d8\u5b50\u3092\u78ba\u8a8d\u3057\u3001\u4fee\u6b63\u72481.30.4\u3067\u554f\u984c\u304c\u89e3\u6d88\u3055\u308c\u308b\u3053\u3068\u3092\u691c\u8a3c\u3057\u3066\u3044\u307e\u3059\u30020.9.6\u304b\u3089\u4fee\u6b63\u7248\u672a\u6e80\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u5f71...", "creation_timestamp": "2026-07-20T23:10:09.596031Z"}, {"uuid": "2123aa1f-4448-4391-8cc1-308f5df19848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94277", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-vagrant-box\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Daniyal48\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 08:11:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAn isolated Vagrant testbed designed to simulate a complete attack chain: Initial access via the Nginx heap buffer overflow (CVE-2026-42533) followed by root privilege escalation using the Ghostlock kernel vulnerability (CVE-2026-43449).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:39.577738Z"}, {"uuid": "5b49106b-9ff3-48d9-b9da-58bff1ed3c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/GithubRedTeam/94336", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533-Config-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xCyberstan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 6  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 15:15:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStatic config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture \u2192 heap overflow / info leak).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:29.804591Z"}, {"uuid": "b53adef5-9a52-43eb-8bbc-96bbcb15dbd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/ctinow/253597", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\nhttps://ift.tt/AJH05gL", "creation_timestamp": "2026-07-21T00:00:39.140748Z"}, {"uuid": "b5322fe1-e5c5-4693-b253-c7788a199477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94232", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a nginx-map-risk-audit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a srkyn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 01:45:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDefensive NGINX CVE-2026-42533 map regex risk audit with config scanner, Splunk/Defender notes, and lab evidence.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:40.224097Z"}, {"uuid": "196975cb-6553-41ea-8fae-e38de2ccc2a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/3WcCqL8vieXLsY-uvhRw4xP9N0uTGj-rYeNCRdz3eQJS5pzQ", "content": "", "creation_timestamp": "2026-07-21T01:00:27.692273Z"}, {"uuid": "30298a80-f475-4a01-8f5d-960ee19e7af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3mr4nr5qr4j27", "content": "NGINX Map Regex RCE Gets Public Scanner: Patch Now, Full Exploit Due\u00a0August\n\nCVE-2026-42533 NGINX vulnerability now has a public config scanner as researcher Stan Shaw warns the critical heap buffer overflow \u2014 present in all NGINX versions since 2011 \u2014 defeats ASLR on its own via an info-leak\u2026", "creation_timestamp": "2026-07-21T01:27:49.634475Z"}, {"uuid": "dcf49f02-f6bf-49c3-be6a-80354046c772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mr4pwax6mk2a", "content": "CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\n\nF5 fixes critical nginx flaw CVE-2026-42533 that can crash servers and, in some cases, allow remote code execution through crafted HTTP requests. F5 released patches for a critical nginx vulnerabili\u2026\n#hackernews #news", "creation_timestamp": "2026-07-21T02:06:28.071339Z"}, {"uuid": "29bdc94c-482d-4793-a5fa-4917bc14cbed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mr4z4d3u232r", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 65 interactions\nCVE-2026-60137: 51 interactions\nCVE-2026-58532: 47 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-63030: 35 interactions\nCVE-2026-60137: 28 interactions\nCVE-2026-42533: 10 interactions\n", "creation_timestamp": "2026-07-21T04:50:55.010005Z"}, {"uuid": "33d9b8e6-549c-4f2f-9789-a8b99d4a394b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42533", "type": "seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3mr4zv22eap25", "content": "2026\u5e747\u6708\u5831\u544a\u306enginx\u8106\u5f31\u6027\uff08CVE-2026-42533\uff09\u3092Docker\u3067\u518d\u73fe\u3057\u3066\u307f\u305f | DevelopersIO\nhttps://dev.classmethod.jp/articles/cve-2026-42533-nginx-rce-docker-repro/", "creation_timestamp": "2026-07-21T05:04:44.440708Z"}, {"uuid": "c2ea2380-b69d-463e-9f13-a8f775b2cabe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mr5kg5ilwg2m", "content": "NGINX, falla critica rimasta nascosta 15 anni: rischio crash e codice remoto\nLa vulnerabilit\u00e0 CVE-2026-42533 sfrutta regex e valutazione a due passaggi per corrompere la mem...\nhttps://www.ilsoftware.it/nginx-vulnerabilita-crash-server-attacco-remoto/", "creation_timestamp": "2026-07-21T10:00:38.129034Z"}, {"uuid": "7072bd86-d320-42dd-924b-f3db11ac96f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mr5qb7k2dp2v", "content": "\u26a0\ufe0f PATCH NOW\n\nNGINX patched CVE-2026-42533, a critical 9.2 heap-overflow a remote attacker can trigger with crafted requests.\n\nUnlike June's nginx flaws, this one hits a common regex map config, so most servers are in range.\n\nPatch to 1.30.4 or 1.31.3 now.", "creation_timestamp": "2026-07-21T11:45:15.233566Z"}, {"uuid": "7edb7007-702d-4180-b990-62478c2dfc66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/gGz7JyGqZYT4VnMsR3bt0_p3QI0-Vi7iMv05yZVGOmS6PA", "content": "", "creation_timestamp": "2026-07-21T13:00:06.502895Z"}, {"uuid": "0f3e2f62-6e81-4bb4-b7f5-7ac57a05c69e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr5vy64t3x26", "content": "F5 patches a critical NGINX CVE-2026-42533 vulnerability causing remote code execution. Learn how to update your server and secure your configuration.\n\n#NGINX #CVE202642533 #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-21T13:27:34.136841Z"}, {"uuid": "869cad1a-5468-4538-8b50-955c0b156079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94336", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533-Config-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xCyberstan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 6  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 15:15:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStatic config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture \u2192 heap overflow / info leak).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-22T00:00:21.266031Z"}, {"uuid": "d326fa3f-6964-4bd9-bdcf-18591365e6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/gGz7JyGqZYT4VnMsR3bt0_p3QI0-Vi7iMv05yZVGOmS6PA", "content": "", "creation_timestamp": "2026-07-22T00:00:22.636884Z"}, {"uuid": "a5f1f437-1d6a-469b-8f96-b5c18bc01fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mr7mbat4ud2z", "content": "K000162097: NGINX map directive and regex matching vulnerability CVE-2026-42533 #patchmanagement", "creation_timestamp": "2026-07-22T05:39:00.620761Z"}, {"uuid": "a4783863-c8f5-486c-af8b-fc1a4d063fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mr7shpp6dz26", "content": "F5 fixed a critical nginx flaw (CVE-2026-42533) that allows remote, unauthenticated attackers to crash worker processes. Update to nginx 1.30.4/1.31.3 or NGINX Plus 37.0.3.1 now!", "creation_timestamp": "2026-07-22T07:30:00.921316Z"}, {"uuid": "3c2aefd8-1da6-43c6-84e8-143efee7bd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrabpvon4q2y", "content": "CVE-2026-42533 NGINX Map directive and Regex matching vulnerability - Darren Cho #CVE2026 #NGINX #CyberSecurity", "creation_timestamp": "2026-07-22T12:03:01.471835Z"}, {"uuid": "02c6a9d5-d5e9-47cd-90a9-b95f6d05e499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrabpykqcg2p", "content": "CVE-2026-42533: NGINX's Regex Vulnerability Unveils a Concrete Attack Path #CVE202642533 #NGINX #CyberSecurity", "creation_timestamp": "2026-07-22T12:03:05.083207Z"}, {"uuid": "053efc09-e969-41f8-8d0a-b716a48af544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrabq3la3o2o", "content": "CVE-2026-42533: NGINX Vulnerability Highlights Gaps in Web Server Security #CVE202642533 #NGINX #WebSecurity", "creation_timestamp": "2026-07-22T12:03:07.693845Z"}, {"uuid": "c3c1cb39-79b1-4b4f-b438-e1d3ec192a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrabq6ojav2j", "content": "CVE-2026-42533: NGINX's Regex Bug Highlights Gaps in Security Protocols #CVE2026 #NGINX #CyberSecurity", "creation_timestamp": "2026-07-22T12:03:10.895211Z"}, {"uuid": "646426c2-a9bc-4468-ac57-30f2d091eaea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrabuq2fk42v", "content": "CVE-2026-42533: NGINX Vulnerability Claims Lack Evidence of Severity #CVE202642533 #NGINX #CyberSecurity", "creation_timestamp": "2026-07-22T12:05:43.256584Z"}, {"uuid": "965ecd2a-65bb-40b2-9411-1c816d3ab759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrabutu64b2g", "content": "CVE-2026-42533: Is NGINX's Vulnerability a Harbinger of Widespread Exploitation? #CVE202642533 #NGINX #vulnerability", "creation_timestamp": "2026-07-22T12:05:47.656904Z"}, {"uuid": "4e04e09d-a418-4039-8752-6f514bef7ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/HackerNewscyber/3270", "content": "\u2708\ufe0f \u0647\u0634\u062f\u0627\u0631 \u062f\u0631\u0628\u0627\u0631\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc NGINX\u061b \u062e\u0637\u0631 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a HTTP\n\n\ud83c\udfa5 \u0634\u0631\u06a9\u062a F5 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 NGINX \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-42533 \u0648 \u0627\u0645\u062a\u06cc\u0627\u0632 9.2 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u200c\u0646\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u060c \u0645\u0648\u062c\u0628 \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 \u0648 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0634\u0631\u0627\u06cc\u0637 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0634\u0648\u0646\u062f.\n\n\ud83c\udfa4\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 0.9.6 \u062a\u0627 1.31.2 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc NGINX 1.30.4\u060c 1.31.3 \u0648 NGINX Plus 37.0.3.1 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u067e\u0698\u0648\u0647\u0634\u06af\u0631\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0632 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627 \u062e\u0648\u0627\u0633\u062a\u0647\u200c\u0627\u0646\u062f \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0646\u0633\u0628\u062a \u0628\u0647 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u062e\u0648\u062f \u0627\u0642\u062f\u0627\u0645 \u06a9\u0646\u0646\u062f.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-22T16:00:04.460132Z"}, {"uuid": "ce0310b8-4881-457a-a9e4-42d058fd010b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/FHM-54j_n1Y9BIE2cvmAOWuEiajifCsiTjgu51p5blAHmgA", "content": "", "creation_timestamp": "2026-07-22T17:00:04.053487Z"}, {"uuid": "8d77cbe3-63b4-414c-b5c5-4617c8ffae0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00", "content": "", "creation_timestamp": "2026-07-22T17:00:04.120823Z"}, {"uuid": "a1b66b7c-fdfa-4ced-b9e4-d4c83d0c5bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "Telegram/FHM-54j_n1Y9BIE2cvmAOWuEiajifCsiTjgu51p5blAHmgA", "content": "", "creation_timestamp": "2026-07-23T00:00:10.077791Z"}, {"uuid": "c71097e0-58b0-42a7-a45c-51b677713356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00", "content": "", "creation_timestamp": "2026-07-23T00:00:10.258532Z"}, {"uuid": "1a5c0774-a808-4d2c-888d-6d18cb26d2a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/HackerNewscyber/3270", "content": "\u2708\ufe0f \u0647\u0634\u062f\u0627\u0631 \u062f\u0631\u0628\u0627\u0631\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc NGINX\u061b \u062e\u0637\u0631 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a HTTP\n\n\ud83c\udfa5 \u0634\u0631\u06a9\u062a F5 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 NGINX \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-42533 \u0648 \u0627\u0645\u062a\u06cc\u0627\u0632 9.2 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u200c\u0646\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u060c \u0645\u0648\u062c\u0628 \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 \u0648 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0634\u0631\u0627\u06cc\u0637 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0634\u0648\u0646\u062f.\n\n\ud83c\udfa4\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 0.9.6 \u062a\u0627 1.31.2 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc NGINX 1.30.4\u060c 1.31.3 \u0648 NGINX Plus 37.0.3.1 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u067e\u0698\u0648\u0647\u0634\u06af\u0631\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0632 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627 \u062e\u0648\u0627\u0633\u062a\u0647\u200c\u0627\u0646\u062f \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0646\u0633\u0628\u062a \u0628\u0647 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u062e\u0648\u062f \u0627\u0642\u062f\u0627\u0645 \u06a9\u0646\u0646\u062f.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-23T00:00:22.484951Z"}, {"uuid": "51c97c2d-9084-4632-9788-50a9f6c023eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/GithubRedTeam/94803", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533-nginx\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 10:25:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-42533 Nginx\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T12:00:03.234961Z"}, {"uuid": "f111e1f9-a137-41f5-b765-db98cce29181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94803", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42533-nginx\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 10:25:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-42533 Nginx\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:08.524590Z"}, {"uuid": "ada49bc3-3668-4407-9046-1f25ab9e2d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://bsky.app/profile/chrisshort.net/post/3mrfo6j7asc2s", "content": "15-Year-Old Pre-Auth nginx RCE Across 13 Call Sites: Two-Pass Capture Clobbering CVE-2026-42533 \u2013 cyberstan #devopsish cyberstan.co.uk/ngin...", "creation_timestamp": "2026-07-24T15:29:14.757272Z"}, {"uuid": "6cecdaa3-5551-437b-bf1f-b35212702865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/116975662110531360", "content": "15-Year-Old Pre-Auth nginx RCE Across 13 Call Sites: Two-Pass Capture Clobbering CVE-2026-42533 \u2013 cyberstan #devopsish https://cyberstan.co.uk/nginx-rce/", "creation_timestamp": "2026-07-24T15:29:15.131696Z"}]}