SECURITYJul 19 · 20:42 UTCTHE HACKER NEWS[email protected] (The Hacker News)

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

F5 addressed a critical NGINX vulnerability (CVE-2026-42533) that allows remote, unauthenticated attackers to crash worker processes or potentially execute code via crafted HTTP requests. Fixes were released on July 15 in nginx 1.30.4 (stable), 1.31.3 (mainline), and NGINX Plus 37.0.3.1.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

F5organizationNginxtopicCVE-2026-42533topicNGINX Plustopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYMay 14 · 06:00 UTC
18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE
SECURITYMay 26 · 11:49 UTC
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions
SECURITYApr 15 · 12:56 UTC
Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover
SECURITYJun 5 · 08:38 UTC
Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites
SECURITYMay 29 · 18:26 UTC
No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out