sign in--:--:--UTC

CVE-2026-42945

exploited in the wild☆ pin

CVSS

9.2

Reports

8

First seen

May 14, 2026

Last seen

Aug 3, 2026

Affected product

NGINX Plus, NGINX Open Source

Associated actors

APT29 ×1 Chaotic Eclipse ×1 Unknown Chinese threat actor ×1 Void Blizzard ×1

Recent reports

Weekly Cybersecurity Recap: AI Model Breaches, Water-System Attacks, Ransomware, and Critical Vulnerabilities

The Hacker NewsAug 3, 2026 High

Critical NGINX Heap Buffer Overflow Vulnerability (CVE-2026-42533) Allows RCE

The Hacker NewsJul 19, 2026 Critical

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

The Hacker NewsJun 18, 2026 Critical

Multiple Vulnerabilities in Nginx Products — CVE-2026-42945 Exploited in the Wild

GovCERT.HKMay 20, 2026 Critical

NGINX CVE-2026-42945 Heap Buffer Overflow Exploited in the Wild; openDCIM Flaws Also Active

The Hacker NewsMay 17, 2026 High

Nginx Multiple Vulnerabilities

HKCERTMay 15, 2026 Critical

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

The Hacker NewsMay 14, 2026 High

GovCERT.HK Alert: Multiple Vulnerabilities in F5 Products, CVE-2026-42945 Exploited in the Wild

GovCERT.HKMay 14, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans