F5 patches CVE-2026-42533, a regex map heap overflow that crashes nginx workers and may allow RCE in specific configurations.

A security researcher released a public static config scanner Monday for a critical heap buffer overflow in NGINX that has existed since 2011, and the full proof-of-concept exploit that can deliver ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

F5 issued an emergency out-of-band security advisory on June 17, 2026, covering two critical vulnerabilities in NGINX — the web server and reverse proxy software running on approximately 38% of all ...

Every time a critical NGINX vulnerability lands with an ASLR dependency attached, a certain segment of the security community decides the flaw is not really that serious. CVE-2026-42530, the NGINX ...

Exploit attempts are already hammering a newly disclosed NGINX bug dubbed "NGINX Rift," proving once again that attackers read patch notes faster than most admins. Researchers at VulnCheck said they ...

Recently, NSFOCUS CERT detected that Nginx and F5 issued security bulletins to fix the Nginx remote code execution vulnerability (CVE-2026-42945); because the ngx_http_rewrite_module module contains ...

F5, the company supporting the world's most popular web server NGINX, has issued patches for a critical memory corruption bug causing a heap buffer overflow, that could potentially be abused for ...

A critical NGINX vulnerability, undiscovered for 18 years, allows hackers to crash servers with ease and even take full control without authentication in some common configurations. Emergency patches ...

Admins who use the Nginx UI web interface for their nginx-based web servers should update the software promptly. If they don't, attackers can exploit multiple security vulnerabilities and, in the ...

Security vendor Pluto Security has published details of a critical vulnerability in the open-source nginx UI web server configuration tool that has been under active exploitation by cybercriminals ...

Attackers are actively exploiting a critical flaw in the widely used nginx-ui interface for managing NGINX web servers. The flaw, tracked as CVE-2026-33032, (CVSS: 9.8) stems from nginx-ui's insecure ...