{"uuid": "377fa1f4-ffd0-40ae-9480-204178e4b353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "seen", "source": "https://t.me/pphm_HackerNews/2158", "content": "\ud83d\udd34 CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers\n\nF5 fixes critical nginx flaw CVE-2026-42533 that can crash servers and, in some cases, allow remote code execution through crafted HTTP requests.\n\nF5 released patches for a critical nginx vulnerability, tracked as CVE-2026-42533 (CVSS score of 9.2), that can allow an unauthenticated attacker to trigger a heap buffer overflow using specially crafted HTTP requests.\n\n\u201cheap buffer overflow might occur in a worker process when using the map directive with regex matching if the map variable was included in a string expression after a capture affected by this map; a similar issue might happen when using a non-cacheable variable in a string expression (CVE-2026-42533).\u201d reads the advisory.", "creation_timestamp": "2026-08-21T23:00:08.345607Z"}