sign in--:--:--UTC

CVE-2026-42945

exploited in the wild

CVSS

9.2

Reports

6

First seen

May 14

Last seen

Jun 18

Affected product

NGINX Plus, NGINX Open Source

Associated actors

Unknown Chinese threat actor ×1

Recent reports

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

The Hacker NewsJun 18 Critical

Multiple Vulnerabilities in Nginx Products — CVE-2026-42945 Exploited in the Wild

GovCERT.HKMay 20 Critical

NGINX CVE-2026-42945 Heap Buffer Overflow Exploited in the Wild; openDCIM Flaws Also Active

The Hacker NewsMay 17 High

Nginx Multiple Vulnerabilities

HKCERTMay 15 Critical

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

The Hacker NewsMay 14 High

GovCERT.HK Alert: Multiple Vulnerabilities in F5 Products, CVE-2026-42945 Exploited in the Wild

GovCERT.HKMay 14

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans