[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmo5OxILnpSjYz5vgdoZd6mpE9O4VThWb2EUyeeybLQA":3},{"article":4,"iocs":49,"watch_terms":57,"solutions":58,"lesson":153},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"16e3219c-ed0a-4b4f-810c-7fe71bf95de8","F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution","f5-patches-two-critical-nginx-open-source-flaws-enabling-remote-code-execution-937d45","F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve code execution on affected systems. The vulnerabilities are listed below - CVE-2026-42530 (CVSS v4 score: 9.2) - A use-after-free vulnerability in the ngx_http_v3_module that could be triggered by a remote unauthenticated attacker when NGINX Open Source is","F5 has released updates to address two critical vulnerabilities in NGINX Open Source, CVE-2026-42530 and CVE-2026-42055, both rated with a CVSS v4 score of 9.2. These flaws could allow remote, unauthenticated attackers to execute code on affected systems, particularly when ASLR is disabled or bypassed. Patches are available for various NGINX versions, with mitigations including disabling HTTP\u002F3 or reconfiguring specific proxy directives.","F5 patches two critical NGINX Open Source flaws enabling remote code execution.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F06\u002Ff5-patches-two-critical-nginx-open.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhxYclMMaAOBe1jlW_s0S1SfdX3sPrGB9MZ7R9Hfo2ktoF9DiLqPA5ZYmFAyGmzws5eNmqopdPw7bBV7TTO8KgS2C8CJU8cgHNXw0ERAvk8sGRLYXH7M98eqxDM9c-rQTU0Hlj8ISEmSWMCnw6OqJMyhgxxLHCFPwP1JugZ3bCJow7AfTZ40kOo8XpY3WdF\u002Fs1600\u002Ff5.jpg","2026-06-18T17:32:14+00:00","2026-06-18T20:00:08.38121+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"F5","vendor",{"name":21,"type":22},"NGINX Open Source","product",{"name":24,"type":22},"NGINX Plus",{"name":26,"type":22},"NGINX Gateway Fabric",{"name":28,"type":22},"NGINX Instance Manager",{"name":30,"type":22},"NGINX Ingress Controller","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,39,44],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54],{"type":51,"value":52,"context":53},"cve","CVE-2026-42530","Use-after-free vulnerability in ngx_http_v3_module",{"type":51,"value":55,"context":56},"CVE-2026-42055","Heap-based buffer overflow vulnerability in ngx_http_proxy_v2_module and ngx_http_grpc_module",[18,21,24],{"controls":59,"vendors":147},[60,89,118],{"slug":61,"name":62,"problem":63,"products":64},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[65,73,81],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":90,"name":91,"problem":92,"products":93},"patch-management","Automated patch management","Known holes get closed in days, not months.",[94,102,110],{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":119,"name":120,"problem":121,"products":122},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[123,131,139],{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":140,"vendor_name":141,"vendor_logo":142,"product_slug":143,"product_name":144,"url":145,"description":146},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",[148],{"slug":149,"name":18,"logo_path":150,"roles":151},"f5","\u002Fvendor-logos\u002Ff5.png",[152],"affected",{"slug":154,"title":155,"body":156,"framework_refs":157,"framework_notes":168},"critical-nginx-flaws-allow-unauthenticated-remote-code-execution","Critical NGINX Flaws Allow Unauthenticated Remote Code Execution","Two critical vulnerabilities (CVE-2026-42530 and CVE-2026-42055) in NGINX Open Source allow remote, unauthenticated attackers to execute arbitrary code, earning a near-maximum CVSS v4 score of 9.2. The risk is compounded when Address Space Layout Randomization (ASLR) is disabled or can be bypassed, removing a key memory protection layer. NGINX is one of the most widely deployed web servers and reverse proxies in the world, making unpatched instances a high-value target across thousands of organizations. Because no authentication is required to exploit these flaws, any internet-facing NGINX instance running a vulnerable version is at immediate risk. Prompt patching combined with secure configuration practices is essential to prevent compromise.",[158,159,160,161,162,163,164,165,166,167],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","CIS Control 4: Secure Configuration of Enterprise Assets and Software","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST SI-2: Flaw Remediation","NIST CM-6: Configuration Settings","NIST RA-5: Vulnerability Monitoring and Scanning","NIST SA-11: Developer Testing and Evaluation","ITIL Change Management: Emergency Change Procedures","OWASP Top 10 A06:2021 – Vulnerable and Outdated Components",{}]