Skip to content
Vulnerability intelligence

CVE-2026-42533

A crafted HTTP request can trigger a heap buffer overflow in NGINX worker processes. The patch is out. The install base is enormous.

2026
What WebPulse reported · 1 analysis
NGINX Patched a Heap Overflow That Crashes Workers. Millions of Servers Are in the Blast Zone.

A crafted HTTP request can trigger a heap buffer overflow in NGINX worker processes. The patch is out. The install base is enormous.

July 21, 2026
View CVE-2026-42533 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-50549 CVE-2026-50548 CVE-2026-9082 CVE-2026-49160 CVE-2026-48019 CVE-2026-47291 CVE-2026-46406 CVE-2026-39861