https://vulnerability.circl.lu/sightings/feed 2026-06-20T02:11:43.193162+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fcddc24c-0fad-4b40-89a4-52e0cb22a1f7/export 2026-06-20T02:11:43.201156+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fcddc24c-0fad-4b40-89a4-52e0cb22a1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42530", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mompp6rrhu2b", "content": "Two 9.2s in stock NGINX: inside the HTTP/3 QPACK use-after-free and the gRPC heap overflow F5 just\u00a0patched\n\nF5 patched two critical NGINX flaws (CVSS 9.2): a QPACK use-after-free in HTTP/3 and a gRPC heap overflow. Full\u2026\n\nhttps://thecybersecguru.com/news/nginx-cve-2026-42530-cve-2026-42055-rce/", "creation_timestamp": "2026-06-19T06:29:31.707317Z"} 2026-06-19T06:29:31.707317+00:00 https://vulnerability.circl.lu/sighting/fb1e197a-19c6-403c-b388-1adc725bcfd3/export 2026-06-20T02:11:43.201083+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fb1e197a-19c6-403c-b388-1adc725bcfd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42530", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3momr3spaum2v", "content": "\ud83d\udcf0 Picu Kerusakan Memori, F5 Rilis Patch Darurat Tutup Celah Kritis RCE pada NGINX\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/19/f5-rilis-patch-darurat-celah-kritis-nginx/\n\n#aslr #bufferOverflow #cve-2026-42055 #cve-2026-42530 #dos #f5 #http3 #nginx #outOfBand #patchDarurat ", "creation_timestamp": "2026-06-19T06:54:28.719189Z"} 2026-06-19T06:54:28.719189+00:00 https://vulnerability.circl.lu/sighting/f13a347c-ff88-404e-b871-3b0b1d699dbe/export 2026-06-20T02:11:43.201011+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f13a347c-ff88-404e-b871-3b0b1d699dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3momtwvudts26", "content": "CVE-2026-42530 : NGINX Open Source has a vulnerability in the ngx_http_v3_module module. www.cve.org/CVERecord?id...", "creation_timestamp": "2026-06-19T07:45:25.311271Z"} 2026-06-19T07:45:25.311271+00:00 https://vulnerability.circl.lu/sighting/faf1de6c-9861-4113-94f4-45280eba5c88/export 2026-06-20T02:11:43.200935+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "faf1de6c-9861-4113-94f4-45280eba5c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3monc6t4ohu24", "content": "NGINX Open Source: F5 patched two critical remote code execution flaws, including CVE-2026-42530. Update NGINX promptly and verify versions across all hosts. #Cybersecurity #Vulnerability #CloudSecurity\n\nSource: https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html", "creation_timestamp": "2026-06-19T12:00:23.627322Z"} 2026-06-19T12:00:23.627322+00:00 https://vulnerability.circl.lu/sighting/db454273-c696-4665-b4b6-6a9665935bea/export 2026-06-20T02:11:43.200853+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "db454273-c696-4665-b4b6-6a9665935bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/116775720185561378", "content": "F5 Patches Critical Remote Code Execution Flaws in NGINX Open Source and Plus\nF5 addressed two critical vulnerabilities (CVE-2026-42530 and CVE-2026-42055) in NGINX that allow unauthenticated remote code execution or denial-of-service. The flaws affect NGINX Open Source, NGINX Plus, and several related gateway and controller products.\n**If you run NGINX (Open Source, Plus, Ingress Controller, Gateway Fabric, Instance Manager, or App Protect WAF), update immediately to the fixed versions F5 released: NGINX Open Source 1.31.2 or 1.30.3, and NGINX Plus 37.0.2.1 or R36 P6. If you can't patch right away, temporarily disable HTTP/3 by removing \"quic\" from all listen directives, and remove the \"ignore_invalid_headers off\" directive or shrink \"large_client_header_buffers\" to block these attacks until you update.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/f5-patches-critical-remote-code-execution-flaws-in-nginx-open-source-and-plus-q-l-g-f-a/gD2P6Ple2L", "creation_timestamp": "2026-06-19T13:20:05.850994Z"} 2026-06-19T13:20:05.850994+00:00 https://vulnerability.circl.lu/sighting/62ea966c-9a8e-4737-967a-8aaa917156ac/export 2026-06-20T02:11:43.200771+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "62ea966c-9a8e-4737-967a-8aaa917156ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3monjucmz5s2h", "content": "F5 Patches Critical NGINX Vulnerabilities Enabling Unauthenticated Code Execution\n\nF5 released emergency updates for critical NGINX flaws (CVE-2026-42530, CVE-2026-42055) that could enable unauthenticated code execution. F5 has issued out-of-band patches for multiple NGINX vulnera\u2026\n#hackernews #news", "creation_timestamp": "2026-06-19T14:17:40.994156Z"} 2026-06-19T14:17:40.994156+00:00 https://vulnerability.circl.lu/sighting/00b6b307-7f11-4e14-a88a-587dce6fd8ff/export 2026-06-20T02:11:43.200694+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "00b6b307-7f11-4e14-a88a-587dce6fd8ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3moory7o7bs2s", "content": "Friday fuck-up) this time F5-Nginx - The vulnerabilities have been assigned the identifiers CVE-2026-42530 and CVE-2026-42055 and received a CVSS score of 9.2. They allow an unauthenticated remote attacker to trigger a denial-of-service (DoS) condition or achieve arbitrary code execution.", "creation_timestamp": "2026-06-19T16:15:53.130998Z"} 2026-06-19T16:15:53.130998+00:00 https://vulnerability.circl.lu/sighting/94685b2a-a351-41e7-b0d1-f0036834f8ab/export 2026-06-20T02:11:43.200610+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "94685b2a-a351-41e7-b0d1-f0036834f8ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3moory7oj2c2s", "content": "Friday fuck-up) this time F5-Nginx - The vulnerabilities have been assigned the identifiers CVE-2026-42530 and CVE-2026-42055 and received a CVSS score of 9.2. They allow an unauthenticated remote attacker to trigger a denial-of-service (DoS) condition or achieve arbitrary code execution.", "creation_timestamp": "2026-06-19T16:15:54.954092Z"} 2026-06-19T16:15:54.954092+00:00 https://vulnerability.circl.lu/sighting/905daf71-3a8f-418f-8eda-da2592f6390d/export 2026-06-20T02:11:43.200497+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "905daf71-3a8f-418f-8eda-da2592f6390d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3moory7oly22s", "content": "Friday fuck-up) this time F5-Nginx - The vulnerabilities have been assigned the identifiers CVE-2026-42530 and CVE-2026-42055 and received a CVSS score of 9.2. They allow an unauthenticated remote attacker to trigger a denial-of-service (DoS) condition or achieve arbitrary code execution.", "creation_timestamp": "2026-06-19T16:15:56.815848Z"} 2026-06-19T16:15:56.815848+00:00 https://vulnerability.circl.lu/sighting/bfd5507b-8375-44ce-abfe-dff569584faf/export 2026-06-20T02:11:43.199418+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bfd5507b-8375-44ce-abfe-dff569584faf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42530", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3moo3tu7caf2s", "content": "Use-after-free in the QPACK encoder of nginx HTTP/3 - CVE-2026-42530", "creation_timestamp": "2026-06-19T19:39:32.454313Z"} 2026-06-19T19:39:32.454313+00:00