What is CVE-2026-42530?
Use-after-free RCE; CVSS 9.2; patched
Affected product
NGINX Open Source
Remediation Steps
- Update NGINX Open Source to the patched version released by F5
- Disable or restrict access to the ngx_http_v3_module if not required
- Monitor for signs of exploitation or anomalous traffic patterns
- Review access logs for suspicious remote requests to affected NGINX instances
References
Coverage on defend.network
🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.