https://vulnerability.circl.lu/sightings/feed 2026-09-23T00:30:07.061502+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3657c82a-a26e-4a03-8035-3e82f7d6672e/export 2026-09-23T00:30:07.086495+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3657c82a-a26e-4a03-8035-3e82f7d6672e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42055", "type": "seen", "source": "https://t.me/CyberDispatch/2096", "content": "The critical NGINX flaws now have a clearer technical path.\n\nCVE-2026-42530 comes down to an HTTP/3 lifetime mismatch that can leave a freed stream pointer treated as valid.\n\nCVE-2026-42055 lets oversized HPACK data write past its buffer, causing unauthenticated worker crashes.", "creation_timestamp": "2026-08-30T00:00:27.960469Z"} 2026-08-30T00:00:27.960469+00:00 https://vulnerability.circl.lu/sighting/3fc27f78-5f59-4c74-9d51-7b5c4f0aafe0/export 2026-09-23T00:30:07.088972+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3fc27f78-5f59-4c74-9d51-7b5c4f0aafe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42055", "type": "seen", "source": "https://t.me/CyberDispatch/2096", "content": "The critical NGINX flaws now have a clearer technical path.\n\nCVE-2026-42530 comes down to an HTTP/3 lifetime mismatch that can leave a freed stream pointer treated as valid.\n\nCVE-2026-42055 lets oversized HPACK data write past its buffer, causing unauthenticated worker crashes.", "creation_timestamp": "2026-08-29T20:00:09.163068Z"} 2026-08-29T20:00:09.163068+00:00 https://vulnerability.circl.lu/sighting/eb105244-4754-4cf0-8451-b77a30efb565/export 2026-09-23T00:30:07.089147+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "eb105244-4754-4cf0-8451-b77a30efb565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42055", "type": "seen", "source": "https://t.me/angie_software/168", "content": "\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!\n\n\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Angie \u0438 Angie PRO 1.11.8 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u043d\u0435\u0435 \u0432 nginx.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u043e\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c gRPC (CVE-2026-42055), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u044b \"charset_map\" (CVE-2026-48142).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-42530, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0430\u044f \u0432 nginx-\u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 HTTP/3, \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Angie.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432 \"acme_http_port\" \u0438 \"acme_dns_port\".\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Angie \u0438 Angie PRO.\n\n\u0425\u043e\u0440\u043e\u0448\u0435\u0433\u043e \u0434\u043d\u044f!", "creation_timestamp": "2026-08-29T18:00:05.527693Z"} 2026-08-29T18:00:05.527693+00:00 https://vulnerability.circl.lu/sighting/e8643465-8f29-4327-b2da-5163bc761317/export 2026-09-23T00:30:07.089279+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e8643465-8f29-4327-b2da-5163bc761317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42055", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrroof4vpo22", "content": "CVE-2026-42055 - nginx_plus\nNGINX servers with certain modules and configurations are at risk of being remotely restarted by an attacker. This could potentially allow an attacker to execute code on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nginxplus #f5 #Bitnami #CVE #infosec", "creation_timestamp": "2026-07-29T10:10:04.299285Z"} 2026-07-29T10:10:04.299285+00:00 https://vulnerability.circl.lu/sighting/e46e7bab-74b3-45a2-b5f3-6d1342d4924c/export 2026-09-23T00:30:07.089387+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e46e7bab-74b3-45a2-b5f3-6d1342d4924c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42055", "type": "seen", "source": "https://t.me/GithubRedTeam/95482", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a NGINX_2026_CVE_Bundle_CTI_Report\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChPratik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 07:35:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCovered CVEs: CVE-2026-28755, CVE-2026-42926, CVE-2026-9256, CVE-2026-42055, CVE-2026-42533\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-29T00:00:39.176919Z"} 2026-07-29T00:00:39.176919+00:00 https://vulnerability.circl.lu/sighting/ae94c108-02f5-4631-8226-3fd45b5fb46a/export 2026-09-23T00:30:07.089497+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ae94c108-02f5-4631-8226-3fd45b5fb46a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42055", "type": "seen", "source": "https://t.me/GithubRedTeam/95482", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a NGINX_2026_CVE_Bundle_CTI_Report\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChPratik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 07:35:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCovered CVEs: CVE-2026-28755, CVE-2026-42926, CVE-2026-9256, CVE-2026-42055, CVE-2026-42533\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T10:00:04.829699Z"} 2026-07-28T10:00:04.829699+00:00 https://vulnerability.circl.lu/sighting/e0c60c27-2e65-4a31-b484-32c1231ffcf9/export 2026-09-23T00:30:07.089608+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e0c60c27-2e65-4a31-b484-32c1231ffcf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42055", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9290", "content": "Update: the critical NGINX flaws now have a clearer technical path.\n\nCVE-2026-42530 comes down to an HTTP/3 lifetime mismatch that can leave a freed stream pointer treated as valid.\n\nCVE-2026-42055 lets oversized HPACK data write past its buffer, causing unauthenticated worker crashes.\n\nPatch or apply mitigations.\n\nRead: https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "creation_timestamp": "2026-07-16T00:00:10.643482Z"} 2026-07-16T00:00:10.643482+00:00 https://vulnerability.circl.lu/sighting/d9233cab-a821-48e5-b4aa-cfb00fb004ab/export 2026-09-23T00:30:07.089712+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d9233cab-a821-48e5-b4aa-cfb00fb004ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42055", "type": "seen", "source": "https://t.me/thehackernews/9278", "content": "\ud83d\udea8 Two critical NGINX flaws can lead to remote code execution.\n\nF5 has patched:\n\u2022 CVE-2026-42530 (HTTP/3 use-after-free)\n\u2022 CVE-2026-42055 (HTTP/2 heap buffer overflow)\n\nBoth require specific configurations and ASLR bypass conditions.\n\nDetails here \u2192 https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "creation_timestamp": "2026-07-16T00:00:10.314966Z"} 2026-07-16T00:00:10.314966+00:00 https://vulnerability.circl.lu/sighting/83adef13-324b-45d8-bf34-e45327def01a/export 2026-09-23T00:30:07.089815+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "83adef13-324b-45d8-bf34-e45327def01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42055", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqpji372sc2o", "content": "F5\u793e\u3001NGINX\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5e2f\u57df\u5916\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\n\n\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696d\u306eF5\u306f\u3001NGINX\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u30fc\u306e\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u3001\u5e2f\u57df\u5916\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\u3053\u308c\u306b\u306f\u3001\u653b\u6483\u8005\u304c\u8106\u5f31\u306a\u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u30012\u3064\u306e\u91cd\u5927\u306a\u6b20\u9665\u304c\u542b\u307e\u308c\u3066\u3044\u308b\u3002\n\n2\u3064\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306f\u3001ngx_http_v3_module\uff08CVE-2026-42530\uff09\u3068ngx_http_proxy_v2_module\u304a\u3088\u3073ngx_http_grpc_module\uff08CVE-2026-42055\uff09\u3067\u767a\u898b\u3055\u308c\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u4ee5...", "creation_timestamp": "2026-07-15T20:06:38.235319Z"} 2026-07-15T20:06:38.235319+00:00 https://vulnerability.circl.lu/sighting/999018e6-3233-4417-8cc4-916e67f74c20/export 2026-09-23T00:30:07.089923+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "999018e6-3233-4417-8cc4-916e67f74c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42055", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqpi3q3fx22o", "content": "\u300cnginx\u300d\u306b\u8907\u6570\u306e\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\n\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u300cnginx\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u6709\u511f\u7248\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u7248\u306e\u3044\u305a\u308c\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\nF5\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670817\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-42055\u300d\u300cCVE-2026-42530\u300d\u300cCVE-2026-48142\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u300cCVE-2026-42055\u300d\u306f\u3001\u300cproxy\u300d\u300cgrpc\u300d\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u78ba\u8a8d\u3055\u308c\u305f\u30d2\u30fc\u30d7\u30d9\u30fc\u30b9\u306e\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u7279\u5b9a\u306e\u69cb\u6210\u3068\u3057\u305f\u5834\u5408\u306b\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\u60aa\u7528\u3055\u308c\u308b\u3068\u30ef\u30fc\u30ab\u30fc\u30d7\u30ed\u30bb\u30b9\u306e\u518d\u8d77\u52d5\u3092\u5f15\u304d\u8d77\u3053\u3057\u305f\u308a\u3001\u30e1\u30e2...", "creation_timestamp": "2026-07-15T19:41:45.318305Z"} 2026-07-15T19:41:45.318305+00:00