{"vulnerability": "CVE-2026-42530", "sightings": [{"uuid": "510e7185-20d6-4759-9299-fe9e1f005477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mruivhgv4v2x", "content": "A public PoC now details CVE-2026-42530, an NGINX HTTP/3 RCE from a QPACK use-after-free. Upgrade to NGINX 1.31.2 to close the flaw now.\n\n#NGINX #HTTP3 #CVE202642530 #RCE #UseAfterFree #QUIC #QPACK #PoC #Cybersecurity", "creation_timestamp": "2026-07-30T13:04:38.537705Z"}, {"uuid": "f83d827f-074f-499c-ba98-94755e44593b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moivbi45fe2b", "content": "CVE-2026-42530 - NGINX Open-Source ngx_http_v3_module vulnerability\nCVE ID : CVE-2026-42530\n \n Published : June 17, 2026, 2:04 p.m. | 3\u00a0hours, 4\u00a0minutes ago\n \n Description : NGINX Open Source has a vulnerability in the ngx_http_v3_module\u00a0module. When NGINX Open Source is confi...", "creation_timestamp": "2026-06-17T17:58:34.658348Z"}, {"uuid": "e87e9347-172c-474c-a0f6-66dfd79ebd3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3moivjizel522", "content": "\ud83d\udcf0 CVE-2026-42530: Nginx 1.30.2 and Nginx 1.31.2\n\nDetails for CVE-2026-42530, potentially affecting Nginx versions 1.30.2 and 1.31.2, are not accessible in the provided content. The article consis...\n\nhttps://tinyurl.com/28yq6x9p #TechNews #CrustyTLDR", "creation_timestamp": "2026-06-17T18:03:06.266969Z"}, {"uuid": "4ef1dd73-70c2-49c4-8811-6cbed306a0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1927", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}, {"uuid": "572e4709-0f79-4a8a-93b2-924175f5e0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1929", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}, {"uuid": "4ff3409d-48c7-48e8-860f-6b3709d9d596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mokvn4bbjd2j", "content": "\ud83d\udd17 CVE : CVE-2026-42055, CVE-2026-42530, CVE-2026-48142", "creation_timestamp": "2026-06-18T13:10:33.453997Z"}, {"uuid": "ad783868-21b7-45d7-9ec6-836f5a6baaca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3mokx4lsc7y2t", "content": "CVE-2026-42530: Use after free in nginx HTTP/3 QUIC module\nDiscussion | lobsters | Author: jmillikin", "creation_timestamp": "2026-06-18T13:36:57.771784Z"}, {"uuid": "cef1f80c-0d20-479c-8b74-788797a51e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/lobsters-feed.bsky.social/post/3mokxc53qwe24", "content": "CVE-2026-42530: Use after free in nginx HTTP/3 QUIC module https://lobste.rs/s/pbvqlz #security ", "creation_timestamp": "2026-06-18T13:40:03.778259Z"}, {"uuid": "075e6891-453a-4faa-bb2b-2b6865159f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116771677218326138", "content": "A lot of offensive activities were identified targeting F5 NGINX Open Source (CVE-2026-42530) https://vuldb.com/vuln/372026/cti", "creation_timestamp": "2026-06-18T14:53:11.555454Z"}, {"uuid": "69c89023-bacd-4ecd-8a19-bdad52eddd6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moln6rpwau2a", "content": "\ud83d\udea8 HIGH: CVE-2026-42530\n\nCVSS 8.1/10\n\n\ud83d\udccb WHAT IT IS:\nNGINX Open Source has a vulnerability in the ngx_http_v3_module. When NGINX is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This may cause a ", "creation_timestamp": "2026-06-18T20:11:53.447477Z"}, {"uuid": "028a0e1f-4853-431d-a4d7-ed2e80b3bef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3molqwn4o5k62", "content": "F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution TheHackerNews F5 fixes CVE-2026-42530 and CVE-2026-42055 in NGINX Open Source, addressing HTTP/3 and HTTP/2 flaws that...\n\n#Security #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-18T21:18:58.312124Z"}, {"uuid": "87fd2e13-dca5-4068-9b1f-74caaf19f276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3molsfz3p3b2n", "content": "F5 patched two critical NGINX Open Source flaws, CVE-2026-42530 and CVE-2026-42055, that could enable remote code execution in certain configs. Mitigations include disabling HTTP/3 or adjusting headers. #NGINX #F5 #CVE202642530", "creation_timestamp": "2026-06-18T21:45:25.963442Z"}, {"uuid": "d2dab024-e84e-49f6-aefe-f7bca62ff1bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "content": "F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve code execution on affected systems.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-42530 (CVSS v4 score: 9.2) - A use-after-free vulnerability in the ngx_http_v3_module that could be triggered by a remote unauthenticated attacker when NGINX Open Source is", "creation_timestamp": "2026-06-18T15:32:14.000000Z"}, {"uuid": "dd835f0d-fd16-4014-b644-76d872e7491b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/dju.eurosky.social/post/3molyw2ol3c2h", "content": "plusieurs CVE dans nginx\n\nCVE-2026-42530\nCVE-2026-42055\nCVE-2026-48142\n\nthehackernews.com/2026/06/f5-p...", "creation_timestamp": "2026-06-18T23:41:47.658712Z"}, {"uuid": "fcddc24c-0fad-4b40-89a4-52e0cb22a1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42530", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mompp6rrhu2b", "content": "Two 9.2s in stock NGINX: inside the HTTP/3 QPACK use-after-free and the gRPC heap overflow F5 just\u00a0patched\n\nF5 patched two critical NGINX flaws (CVSS 9.2): a QPACK use-after-free in HTTP/3 and a gRPC heap overflow. Full\u2026\n\nhttps://thecybersecguru.com/news/nginx-cve-2026-42530-cve-2026-42055-rce/", "creation_timestamp": "2026-06-19T06:29:31.707317Z"}, {"uuid": "fb1e197a-19c6-403c-b388-1adc725bcfd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42530", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3momr3spaum2v", "content": "\ud83d\udcf0 Picu Kerusakan Memori, F5 Rilis Patch Darurat Tutup Celah Kritis RCE pada NGINX\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/19/f5-rilis-patch-darurat-celah-kritis-nginx/\n\n#aslr #bufferOverflow #cve-2026-42055 #cve-2026-42530 #dos #f5 #http3 #nginx #outOfBand #patchDarurat ", "creation_timestamp": "2026-06-19T06:54:28.719189Z"}, {"uuid": "f13a347c-ff88-404e-b871-3b0b1d699dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3momtwvudts26", "content": "CVE-2026-42530 : NGINX Open Source has a vulnerability in the ngx_http_v3_module module. www.cve.org/CVERecord?id...", "creation_timestamp": "2026-06-19T07:45:25.311271Z"}, {"uuid": "a9c35470-6661-4673-9590-61ef0bd51960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "Telegram/1GsfOzUboS3JWnialEkr6Pf0VdQ2CZOxE9iogkqFyOsWag", "content": "", "creation_timestamp": "2026-06-18T18:39:43.000000Z"}, {"uuid": "faf1de6c-9861-4113-94f4-45280eba5c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3monc6t4ohu24", "content": "NGINX Open Source: F5 patched two critical remote code execution flaws, including CVE-2026-42530. Update NGINX promptly and verify versions across all hosts. #Cybersecurity #Vulnerability #CloudSecurity\n\nSource: https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "creation_timestamp": "2026-06-19T12:00:23.627322Z"}, {"uuid": "db454273-c696-4665-b4b6-6a9665935bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/116775720185561378", "content": "F5 Patches Critical Remote Code Execution Flaws in NGINX Open Source and Plus\nF5 addressed two critical vulnerabilities (CVE-2026-42530 and CVE-2026-42055) in NGINX that allow unauthenticated remote code execution or denial-of-service. The flaws affect NGINX Open Source, NGINX Plus, and several related gateway and controller products.\n**If you run NGINX (Open Source, Plus, Ingress Controller, Gateway Fabric, Instance Manager, or App Protect WAF), update immediately to the fixed versions F5 released: NGINX Open Source 1.31.2 or 1.30.3, and NGINX Plus 37.0.2.1 or R36 P6. If you can't patch right away, temporarily disable HTTP/3 by removing \"quic\" from all listen directives, and remove the \"ignore_invalid_headers off\" directive or shrink \"large_client_header_buffers\" to block these attacks until you update.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/f5-patches-critical-remote-code-execution-flaws-in-nginx-open-source-and-plus-q-l-g-f-a/gD2P6Ple2L", "creation_timestamp": "2026-06-19T13:20:05.850994Z"}, {"uuid": "62ea966c-9a8e-4737-967a-8aaa917156ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3monjucmz5s2h", "content": "F5 Patches Critical NGINX Vulnerabilities Enabling Unauthenticated Code Execution\n\nF5 released emergency updates for critical NGINX flaws (CVE-2026-42530, CVE-2026-42055) that could enable unauthenticated code execution. F5 has issued out-of-band patches for multiple NGINX vulnera\u2026\n#hackernews #news", "creation_timestamp": "2026-06-19T14:17:40.994156Z"}, {"uuid": "00b6b307-7f11-4e14-a88a-587dce6fd8ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3moory7o7bs2s", "content": "Friday fuck-up) this time F5-Nginx - The vulnerabilities have been assigned the identifiers CVE-2026-42530 and CVE-2026-42055 and received a CVSS score of 9.2. They allow an unauthenticated remote attacker to trigger a denial-of-service (DoS) condition or achieve arbitrary code execution.", "creation_timestamp": "2026-06-19T16:15:53.130998Z"}, {"uuid": "94685b2a-a351-41e7-b0d1-f0036834f8ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3moory7oj2c2s", "content": "Friday fuck-up) this time F5-Nginx - The vulnerabilities have been assigned the identifiers CVE-2026-42530 and CVE-2026-42055 and received a CVSS score of 9.2. They allow an unauthenticated remote attacker to trigger a denial-of-service (DoS) condition or achieve arbitrary code execution.", "creation_timestamp": "2026-06-19T16:15:54.954092Z"}, {"uuid": "905daf71-3a8f-418f-8eda-da2592f6390d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3moory7oly22s", "content": "Friday fuck-up) this time F5-Nginx - The vulnerabilities have been assigned the identifiers CVE-2026-42530 and CVE-2026-42055 and received a CVSS score of 9.2. They allow an unauthenticated remote attacker to trigger a denial-of-service (DoS) condition or achieve arbitrary code execution.", "creation_timestamp": "2026-06-19T16:15:56.815848Z"}, {"uuid": "bfd5507b-8375-44ce-abfe-dff569584faf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3moo3tu7caf2s", "content": "Use-after-free in the QPACK encoder of nginx HTTP/3 - CVE-2026-42530", "creation_timestamp": "2026-06-19T19:39:32.454313Z"}, {"uuid": "978e67c3-6215-478c-80b8-19a12555bfae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/kontronn.bsky.social/post/3mosijvo7222x", "content": "Nginx QUIC RCE Vulnerability CVE-2026-42530: Security Implications of HTTP/3 www.pudn.club/news/nginx-q...", "creation_timestamp": "2026-06-21T13:37:23.040427Z"}, {"uuid": "17e976ce-db30-4b86-a922-7b614c846cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmkxha2v2m", "content": "\ud83d\udea8  ALERT: CVE-2026-42530\n\nCVSS 8.1/10\n\n\ud83d\udccb WHAT IT IS:\nNGINX Open Source has a vulnerability in the ngx_http_v3_module. When NGINX is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This may cause ", "creation_timestamp": "2026-06-22T00:22:06.060030Z"}, {"uuid": "1c3a3d46-1081-4647-918c-c2b850193593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mourv4si7h22", "content": "F5 releases security updates for NGINX Open Source fixing CVE-2026-42530 (CVSS 9.2), a use-after-free flaw in ngx_http_v3_module that could allow remote code execution. Update now!", "creation_timestamp": "2026-06-22T11:29:55.861356Z"}, {"uuid": "aa1b4f73-b1f5-4ef4-96b5-8f9e2d6b9fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42530", "type": "seen", "source": "https://infosec.exchange/ap/users/116710323468652980/statuses/116794392691446150", "content": "F5 Patches Critical NGINX RCE Bugs CVE-2026-42530/42055\n\ud83d\udd17 https://cybersecurefox.com/en/f5-critical-nginx-vulnerabilities-cve-2026-42530-42055\n#F5 #NGINX #CVE-2026-42530 #CVE-2026-42055 #HTTP/3 #vulnerability", "creation_timestamp": "2026-06-22T15:15:11.546523Z"}, {"uuid": "833a709e-feb9-4444-9f39-ebd392787395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://gist.github.com/muhamedfazalps/a3449070789a6a2c13d4d4e844af803b", "content": "# \u26a0\ufe0f SECURITY ALERT: Multiple CVEs Affecting Popular Packages (June 2026)\n\n## CVE-2026-48931 \u2014 Node.js 24.17 / node-fetch Premature Close\n- **Impact:** Affects Node.js 24.17 and any app using node-fetch\n- **Severity:** High\n- **Affected:** Backstage (20\ud83d\udc4d issue), any Node.js app on 24.17\n- **Fix:** Update Node.js or apply backport\n- **Issue:** https://github.com/backstage/backstage/issues/34651\n\n## CVE-2026-54297 \u2014 Faraday Dependency Vulnerability\n- **Impact:** Affects Fastlane and apps using Faraday\n- **Severity:** High\n- **Affected:** Fastlane (9\ud83d\udc4d issue), any Ruby app using Faraday\n- **Fix:** Update Faraday dependency\n- **Issue:** https://github.com/fastlane/fastlane/issues/30086\n\n## CVE-2026-42530 & CVE-2026-42055 \u2014 nginx Vulnerabilities\n- **Impact:** Affects nginx and mailcow-dockerized\n- **Severity:** High\n- **Affected:** mailcow-dockerized (7\ud83d\udc4d issue), any nginx deployment\n- **Fix:** Update nginx to patched version\n- **Issue:** https://github.com/mailcow/mailcow-dockerized/issues/7299\n\n## js-yaml Quadratic DoS (v3.x)\n- **Impact:** Affects any app using js-yaml v3.x for YAML parsing\n- **Severity:** Medium-High\n- **Affected:** 15\ud83d\udc4d issue requesting backport from v4.2.0 to v3\n- **Fix:** Update to js-yaml v4.2.0+ or apply backport\n- **Issue:** https://github.com/nodeca/js-yaml/issues/762\n\n## How to Check If You're Affected\n1. Check your Node.js version: `node --version`\n2. Check your Ruby/Bundler dependencies: `bundle list | grep faraday`\n3. Check your nginx version: `nginx -v`\n4. Check your js-yaml version: `npm ls js-yaml`\n\n## What to Do\n1. Update affected dependencies immediately\n2. Review logs for suspicious activity\n3. Rotate credentials if exposure is suspected\n\n---\n*If this alert helped you: https://buymeacoffee.com/muhamedfazalps*\n", "creation_timestamp": "2026-06-23T13:41:44.000000Z"}, {"uuid": "2d5cf4f3-bc25-4ede-987d-841e5f068822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3moyakl54rp2v", "content": "F5 patches critical NGINX flaws enabling remote code execution. Security teams need to prioritise updates for CVE-2026-42530 and related vulnerabilities affecting open-source\u2026\n\nhttps://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html\n\n#cybersecurity #infosec", "creation_timestamp": "2026-06-23T20:30:27.147464Z"}, {"uuid": "b8c25301-46e5-469b-8b20-603dfd26a343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3mp2q6blryx2v", "content": "\ud83d\udce1 Two More Critical NGINX Vulnerabilities: CVE-2026-42530 and CVE-2026-42055", "creation_timestamp": "2026-06-24T20:15:13.908392Z"}, {"uuid": "0a286360-a736-4bac-8e18-a45db7af24fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-prodotti-nginix", "content": "", "creation_timestamp": "2026-06-25T16:45:32.604084Z"}, {"uuid": "4ef68d1d-48c0-4e6e-934a-175c27981009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/GithubRedTeam/89682", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42530\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a v4ltonn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 19:38:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nScanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP/3 QPACK encoder stream Use-After-Free (CVSS 9.2)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:22.828078Z"}, {"uuid": "8144a90e-12ba-412a-9ea4-78e5a4f39209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/GithubRedTeam/89690", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42530\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 20:54:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-42530\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:22.450002Z"}, {"uuid": "820a4440-2d09-4f60-a643-1287a1164969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/GithubRedTeam/89690", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42530\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 20:54:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-42530\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:38.260370Z"}, {"uuid": "745b9d69-3eec-4958-a9f5-c5edafe57010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/GithubRedTeam/89682", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42530\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a v4ltonn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 19:38:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nScanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP/3 QPACK encoder stream Use-After-Free (CVSS 9.2)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:38.619606Z"}, {"uuid": "cf7ad02d-006a-44e5-bc27-d6a335e37664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/bdufstecru/3257", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u044f ngx_http_v3_module HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX Open Source, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 NGINX Ingress Controller, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX Gateway Fabric, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 NGINX Instance Manager \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-08509\nCVE-2026-42530\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://my.f5.com/manage/s/article/K000161616", "creation_timestamp": "2026-07-14T01:00:06.023285Z"}, {"uuid": "031f8e77-cb90-48b2-a6dc-2b72b514fc30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89682", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42530\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a v4ltonn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 19:38:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nScanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP/3 QPACK encoder stream Use-After-Free (CVSS 9.2)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:17.836852Z"}, {"uuid": "d8bbb671-1a0f-4ea6-9d3c-d52f9535dcde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/GithubRedTeam/89690", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42530\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 20:54:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-42530\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:18.232641Z"}, {"uuid": "93d5dde3-b822-4684-8f8a-4115bf882cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/bdufstecru/3257", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u044f ngx_http_v3_module HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX Open Source, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 NGINX Ingress Controller, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX Gateway Fabric, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 NGINX Instance Manager \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-08509\nCVE-2026-42530\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://my.f5.com/manage/s/article/K000161616", "creation_timestamp": "2026-07-15T00:00:34.478165Z"}, {"uuid": "850fa5dc-ae48-44a4-aaef-ff2b3324765f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/thehackernews/9278", "content": "\ud83d\udea8 Two critical NGINX flaws can lead to remote code execution.\n\nF5 has patched:\n\u2022 CVE-2026-42530 (HTTP/3 use-after-free)\n\u2022 CVE-2026-42055 (HTTP/2 heap buffer overflow)\n\nBoth require specific configurations and ASLR bypass conditions.\n\nDetails here \u2192 https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "creation_timestamp": "2026-07-15T12:00:04.674060Z"}, {"uuid": "d282b1d8-6d44-4cf2-a0d3-d2c381e3a0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/thehackernews/9290", "content": "Update: the critical NGINX flaws now have a clearer technical path.\n\nCVE-2026-42530 comes down to an HTTP/3 lifetime mismatch that can leave a freed stream pointer treated as valid.\n\nCVE-2026-42055 lets oversized HPACK data write past its buffer, causing unauthenticated worker crashes.\n\nPatch or apply mitigations.\n\nRead: https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "creation_timestamp": "2026-07-15T12:00:04.287507Z"}, {"uuid": "d6cb6435-19b0-422c-9db8-746b08a4aeba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqpi3q3fx22o", "content": "\u300cnginx\u300d\u306b\u8907\u6570\u306e\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\n\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u300cnginx\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u6709\u511f\u7248\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u7248\u306e\u3044\u305a\u308c\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\nF5\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670817\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-42055\u300d\u300cCVE-2026-42530\u300d\u300cCVE-2026-48142\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u300cCVE-2026-42055\u300d\u306f\u3001\u300cproxy\u300d\u300cgrpc\u300d\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u78ba\u8a8d\u3055\u308c\u305f\u30d2\u30fc\u30d7\u30d9\u30fc\u30b9\u306e\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u7279\u5b9a\u306e\u69cb\u6210\u3068\u3057\u305f\u5834\u5408\u306b\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\u60aa\u7528\u3055\u308c\u308b\u3068\u30ef\u30fc\u30ab\u30fc\u30d7\u30ed\u30bb\u30b9\u306e\u518d\u8d77\u52d5\u3092\u5f15\u304d\u8d77\u3053\u3057\u305f\u308a\u3001\u30e1\u30e2...", "creation_timestamp": "2026-07-15T19:41:45.356590Z"}, {"uuid": "58c70452-5f22-41cd-853d-a51a0bbe1bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqpji372sc2o", "content": "F5\u793e\u3001NGINX\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5e2f\u57df\u5916\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\n\n\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696d\u306eF5\u306f\u3001NGINX\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u30fc\u306e\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u3001\u5e2f\u57df\u5916\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\u3053\u308c\u306b\u306f\u3001\u653b\u6483\u8005\u304c\u8106\u5f31\u306a\u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u30012\u3064\u306e\u91cd\u5927\u306a\u6b20\u9665\u304c\u542b\u307e\u308c\u3066\u3044\u308b\u3002\n\n2\u3064\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306f\u3001ngx_http_v3_module\uff08CVE-2026-42530\uff09\u3068ngx_http_proxy_v2_module\u304a\u3088\u3073ngx_http_grpc_module\uff08CVE-2026-42055\uff09\u3067\u767a\u898b\u3055\u308c\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u4ee5...", "creation_timestamp": "2026-07-15T20:06:38.193612Z"}, {"uuid": "e5ecb463-4c09-425e-b3d0-b9677e75323e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9290", "content": "Update: the critical NGINX flaws now have a clearer technical path.\n\nCVE-2026-42530 comes down to an HTTP/3 lifetime mismatch that can leave a freed stream pointer treated as valid.\n\nCVE-2026-42055 lets oversized HPACK data write past its buffer, causing unauthenticated worker crashes.\n\nPatch or apply mitigations.\n\nRead: https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "creation_timestamp": "2026-07-16T00:00:10.681866Z"}, {"uuid": "357d7c6e-f325-443b-a7ec-0c2a3f17a166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://t.me/thehackernews/9278", "content": "\ud83d\udea8 Two critical NGINX flaws can lead to remote code execution.\n\nF5 has patched:\n\u2022 CVE-2026-42530 (HTTP/3 use-after-free)\n\u2022 CVE-2026-42055 (HTTP/2 heap buffer overflow)\n\nBoth require specific configurations and ASLR bypass conditions.\n\nDetails here \u2192 https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "creation_timestamp": "2026-07-16T01:00:06.287858Z"}, {"uuid": "bf94b4a3-8ebd-4a07-9283-151ff3b69eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqrcfl6mb22y", "content": "F5\u793e\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308bNGINX\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u63d0\u4f9b\n\nF5\u306f\u3001\u8907\u6570\u306eNGINX\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5e2f\u57df\u5916\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u308c\u306b\u306f\u3001\u305d\u308c\u305e\u308cCVE-2026-42530\u304a\u3088\u3073CVE-2026-42055\uff08CVSS 9.2\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b2\u3064\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u542b\u307e\u308c\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u30d0\u30b0\u306fHTTP\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u60aa\u7528\u3055\u308c\u3001\u30e1\u30e2\u30ea\u7834\u640d\u3092\u5f15\u304d\u8d77\u3053\u3057\u3001\u30b5\u30fc\u30d3\u30b9\u306e\u518d\u8d77\u52d5\u3084\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\nCVE-2026-42530\uff08CVSS\u30b9\u30b3\u30a29.2\uff09\u306f\u3001NGINX\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306engx_http_v3_mod...", "creation_timestamp": "2026-07-16T13:05:14.308854Z"}, {"uuid": "f76e91c4-869b-4601-bb06-3bbf141a257a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqrdluvyp22y", "content": "F5\u793e\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308bNGINX\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306e\u91cd\u5927\u306a\u8106\u5f31\u60272\u4ef6\u3092\u4fee\u6b63\n\nF5\u306f\u3001NGINX\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u7248\u306b\u5b58\u5728\u3059\u308b2\u3064\u306e\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u308c\u3089\u306e\u6b20\u9665\u306f\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\u306a\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3057\u305f\u3002\n\n\u8106\u5f31\u6027\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-42530 (CVSS v4 \u30b9\u30b3\u30a2: 9.2) - ngx_http_v3_module \u306e use-after-free \u8106\u5f31\u6027\u3002NGINX Open Source \u304c HTTP/3 QUIC \u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u4f7f\u7528\u3057\u3066 QP...", "creation_timestamp": "2026-07-16T13:26:42.404334Z"}, {"uuid": "fd85b170-b326-4701-b3cf-3634260722d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116985949937007253", "content": "PoC's for nginx RCE (CVE-2026-42530, CVE-2026-42533) https://github.com/DepthFirstDisclosures/Nginx-Rift/", "creation_timestamp": "2026-07-26T11:05:33.858104Z"}, {"uuid": "44e35f46-7626-446e-b4ae-a9c030af25ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mrkaezrr7ae2", "content": "PoC's for nginx RCE (CVE-2026-42530, CVE-2026-42533) https://github.com/DepthFirstDisclosures/Nginx-Rift/", "creation_timestamp": "2026-07-26T11:05:42.152704Z"}]}