{"uuid": "5f51f64c-7cc8-4b4f-900c-75474e33df87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42945", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/116600348345397141", "content": "[Related]L'exploitation sur internet de CVE-2026-42945  aka NGINX RIFT https://depthfirst.com/nginx-rift  aurait commenc\u00e9 selon VulnCheck \u2b07\ufe0f \"Exploitation of Critical NGINX Vulnerability Begins\"\"The flaw leads to denial-of-service on default configurations and to remote code execution if ASLR is disabled.\"\"Shortly after F5 released patches for the bug, Depthfirst published technical details and proof-of-concept (PoC) code targeting it. Now, VulnCheck says threat actors are already exploiting the issue in attacks.\n\u201cWe\u2019re seeing active exploitation of CVE-2026-42945 in F5 NGINX, a heap buffer overflow affecting both NGINX Plus and NGINX Open Source on VulnCheck Canaries just days after the CVE was published,\u201d VulnCheck researcher Patrick Garrity warned. ( https://www.linkedin.com/posts/patrickmgarrity_cybersecurity-threatintelligence-riskmanagement-share-7461369931851517952-PBjV/ ) \"\ud83d\udc47 https://www.securityweek.com/exploitation-of-critical-nginx-vulnerability-begins\n#CyberVeille  #NGINXRift", "creation_timestamp": "2026-05-19T08:42:00.537759Z"}