CVE-2026-42530

creationtimestamp| type| source ---|---|--- 2026-06-17 17:58:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moivbi45fe2b 2026-06-17 18:03:06+00:00| seen| https://bsky.app/profile/crustytldr.bsky.social/post/3moivjizel522 2026-06-17 21:00:00+00:00| seen|...

CVE-2026-42530

Summary : NGINX Open Source’s ngx_http_v3_module vulnerability (CVE-2026-42530) occurs when HTTP/3 QUIC is enabled. A remote unauthenticated attacker can craft an HTTP/3 session to reopen a QPACK encoder stream, causing a Use-after-Free in the NGINX worker process and potentially triggering a res...

K000161616: NGINX ngx_http_v3_module vulnerability CVE-2026-42530

Security Advisory Description NGINX Open Source has a vulnerability in the ngxhttpv3module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/3 session to reopen ...