Lucene search
+L

CVE-2026-42055

🗓️ 17 Jun 2026 14:04:32Reported by f5Type 
cve
 cve
🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 472 Views

CVE-2026-42055: NGINX heap overflow in proxy http two and grpc modules due to large headers when ignore invalid headers is off.

Related
Detection
Affected
Refs
Social
NVD
Node
OR
f5dosRange4.3.04.7.0nginx
f5dosMatch4.9.0nginx
f5nginx_gateway_fabricRange1.3.01.6.2
f5nginx_gateway_fabricRange2.0.02.6.3
f5nginx_ingress_controllerRange3.5.03.7.2continuous_releases
f5nginx_ingress_controllerRange4.0.04.0.1continuous_releases
f5nginx_ingress_controllerRange5.0.05.5.0continuous_releases
f5nginx_instance_managerRange2.17.02.22.0
f5nginx_open_sourceRange1.0.01.30.2
f5nginx_open_sourceRange1.31.01.31.1
f5nginx_plusRange37.0.0.137.0.2.1long-term_support
f5nginx_plusRanger33r36continuous_releases
f5nginx_plusMatchr36-continuous_releases
f5nginx_plusMatchr36p1continuous_releases
f5nginx_plusMatchr36p2continuous_releases
f5nginx_plusMatchr36p3continuous_releases
f5nginx_plusMatchr36p4continuous_releases
f5nginx_plusMatchr36p5continuous_releases
f5wafRange4.10.04.16.0nginx
f5wafRange5.2.05.8.0nginx
f5wafRange5.9.05.13.1nginx
[
  {
    "defaultStatus": "unknown",
    "modules": [
      "ngx_http_proxy_v2_module",
      "ngx_http_grpc_module"
    ],
    "product": "NGINX Open Source",
    "vendor": "F5",
    "versions": [
      {
        "lessThan": "1.31.2",
        "status": "affected",
        "version": "1.13.10",
        "versionType": "custom"
      },
      {
        "lessThan": "1.30.3",
        "status": "affected",
        "version": "1.30.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "ngx_http_proxy_v2_module",
      "ngx_http_grpc_module"
    ],
    "product": "NGINX Plus",
    "vendor": "F5",
    "versions": [
      {
        "lessThan": "37.0.2.1",
        "status": "affected",
        "version": "37.0",
        "versionType": "custom"
      },
      {
        "lessThan": "R36 P6",
        "status": "affected",
        "version": "R36",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation