Breaking News – Cyber Threats (last 6h)
Generated: 2026-07-19 17:00 PDT
- Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution
The Hacker News • 2026-07-19 13:42 • thehackernews.com
F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 (stable) and 1.31.3 (mainline), and in NGINX Plus 37.0.3.1; anyone on an earlier build should upgrade.Triggering it can crash or restart the worker, causing a denial of
https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
