{"uuid": "1e35773e-88cd-49d9-9d1b-354e8e2a3d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/43547", "content": "Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution\n\nF5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 (stable) and 1.31.3 (mainline), and in NGINX Plus 37.0.3.1; anyone on an earlier build should upgrade.\n\nTriggering it can crash or restart the worker, causing a denial of\nhttps://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-09-18T08:00:05.539228Z"}