Tag: HTTP/3

Critical CVEs

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

F5 has released security updates to address two critical vulnerabilities in NGINX Open Source that could allow remote code execution. The flaws,…

CVE-2026-11645 CVE-2026-42055 CVE-2026-42530 CVE-2026-42945

June 25, 2026

Critical CVEs

CVE-2026-42530: Use-After-Free in NGINX HTTP/3 Module

A critical use-after-free vulnerability in NGINX Open Source's ngx_http_v3_module allows remote unauthenticated attackers to execute code via a crafted HTTP/3 session. CVSS…

CVE-2026-42530 HTTP/3 NGINX remote code execution

June 25, 2026