CVE-2026-42926 NGINX ngx_http_proxy_v2_module vulnerability

🗓️ 13 May 2026 14:12:45Reported by f5Type

NGINX with proxy_http_version=2 and proxy_set_body allows frame headers and payloads to upstream.

Reporter	Title	Published	Views	Family All 67
FreeBSD	nginx-devel -- multiple vulnerabilities	13 May 202600:00	–	freebsd
FreeBSD	www/nginx -- Remote Code Execution/DoS	14 May 202600:00	–	freebsd
ATTACKERKB	CVE-2026-42926	13 May 202614:12	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : nginx, nginx-all-modules, nginx-core (ALAS2023-2026-1714)	27 May 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : nginx, --advisory ALAS2NGINX1-2026-012 (ALASNGINX1-2026-012)	27 May 202600:00	–	nessus
Tenable Nessus	Fedora 44 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-094eb13bb1)	15 May 202600:00	–	nessus
Tenable Nessus	Fedora 42 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-38623b4fed)	15 May 202600:00	–	nessus
Tenable Nessus	Fedora 43 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-fb53cb4d67)	15 May 202600:00	–	nessus
Tenable Nessus	FreeBSD : nginx-devel -- multiple vulnerabilities (1ed77d8e-53bb-11f1-b339-3497f65b111b)	20 May 202600:00	–	nessus
Tenable Nessus	FreeBSD : www/nginx -- Remote Code Execution/DoS (3414ac89-4f9f-11f1-a1c0-0050569f0b83)	15 May 202600:00	–	nessus

[
  {
    "vendor": "F5",
    "product": "NGINX Open Source",
    "modules": [
      "ngx_http_proxy_v2_module"
    ],
    "versions": [
      {
        "status": "unaffected",
        "version": "1.31.0",
        "lessThan": "*",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "1.29.4",
        "lessThan": "1.30.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
my	www.my.f5.com/manage/s/article/K000161131

13 May 2026 16:16Current

CVSS 3.15.8

CVSS 46.3

EPSS0.00028

CWE-172