CVE-2026-42055

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-42055
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42055.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-42055
Aliases
Downstream
ALPINE (1)
AZL (1)
BELL (1)
CGA (42)
DEBIAN (1)
ECHO (1)
MGASA (1)
MINI (6)
OESA (4)
openSUSE (2)
RHSA (6)
RLSA (5)
SUSE (4)
UBUNTU (1)
Related
ALSA (5)
openSUSE (2)
SUSE (4)
Published
2026-06-17T15:16:50Z
Modified
2026-09-16T03:46:01Z
Severity
  • 9.2 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
Summary
[none]
Details

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:f5:dos:*:*:*:*:*:nginx:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "4.3.0"
                },
                {
                    "last_affected":  "4.7.0"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "f5:dos"
        },
        {
            "cpes":  [
                "cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:continuous_releases:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "3.5.0"
                },
                {
                    "last_affected":  "3.7.2"
                },
                {
                    "introduced":  "4.0.0"
                },
                {
                    "last_affected":  "4.0.1"
                },
                {
                    "introduced":  "5.0.0"
                },
                {
                    "last_affected":  "5.5.0"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "f5:nginx_ingress_controller"
        },
        {
            "cpes":  [
                "cpe:2.3:a:f5:nginx_instance_manager:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "2.17.0"
                },
                {
                    "last_affected":  "2.22.0"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "f5:nginx_instance_manager"
        },
        {
            "cpes":  [
                "cpe:2.3:a:f5:nginx_plus:*:*:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_plus:*:*:*:*:long-term_support:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "37.0.0.1"
                },
                {
                    "fixed":  "37.0.2.1"
                },
                {
                    "introduced":  "r33"
                },
                {
                    "fixed":  "r36"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "f5:nginx_plus"
        },
        {
            "cpes":  [
                "cpe:2.3:a:f5:waf:*:*:*:*:*:nginx:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "4.10.0"
                },
                {
                    "last_affected":  "4.16.0"
                },
                {
                    "introduced":  "5.2.0"
                },
                {
                    "last_affected":  "5.8.0"
                },
                {
                    "introduced":  "5.9.0"
                },
                {
                    "last_affected":  "5.13.1"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "f5:waf"
        },
        {
            "cpes":  [
                "cpe:2.3:a:redhat:update_infrastructure:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "5.0"
                },
                {
                    "fixed":  "5.2"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "redhat:update_infrastructure"
        },
        {
            "cpes":  [
                "cpe:2.3:a:f5:dos:4.9.0:*:*:*:*:nginx:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "4.9.0"
                },
                {
                    "last_affected":  "4.9.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "f5:dos"
        },
        {
            "cpes":  [
                "cpe:2.3:a:f5:nginx_plus:r36:-:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_plus:r36:p1:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_plus:r36:p2:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_plus:r36:p3:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_plus:r36:p4:*:*:continuous_releases:*:*:*",
                "cpe:2.3:a:f5:nginx_plus:r36:p5:*:*:continuous_releases:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "r36-NA"
                },
                {
                    "last_affected":  "r36-NA"
                },
                {
                    "introduced":  "r36-p1"
                },
                {
                    "last_affected":  "r36-p1"
                },
                {
                    "introduced":  "r36-p2"
                },
                {
                    "last_affected":  "r36-p2"
                },
                {
                    "introduced":  "r36-p3"
                },
                {
                    "last_affected":  "r36-p3"
                },
                {
                    "introduced":  "r36-p4"
                },
                {
                    "last_affected":  "r36-p4"
                },
                {
                    "introduced":  "r36-p5"
                },
                {
                    "last_affected":  "r36-p5"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "f5:nginx_plus"
        },
        {
            "cpes":  [
                "cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "8.0"
                },
                {
                    "last_affected":  "8.0"
                },
                {
                    "introduced":  "9.0"
                },
                {
                    "last_affected":  "9.0"
                },
                {
                    "introduced":  "10.0"
                },
                {
                    "last_affected":  "10.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "redhat:enterprise_linux"
        }
    ]
}
References

Affected packages

Git / github.com/nginx/nginx

Affected ranges

Type
GIT
Repo
https://github.com/nginx/nginx
Events
Introduced
a2a09a84eb0a7059880500e70b40796ab1dd0c4d
Last Affected
a92a537860c7b87d3793d9eb41c9cf3ed833b53c
Introduced
e8053c867f9ab14f323e3019ccab585d857abb66
Last Affected
d44205284fa41662da803b796d6056fc1e59b1f3
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:f5:nginx_open_source:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "1.0.0"
        },
        {
            "last_affected":  "1.30.2"
        },
        {
            "introduced":  "1.31.0"
        },
        {
            "last_affected":  "1.31.1"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

release-1.*
release-1.0.0
release-1.0.1
release-1.0.2
release-1.0.3
release-1.0.4
release-1.0.5
release-1.1.0
release-1.1.1
release-1.1.10
release-1.1.11
release-1.1.12
release-1.1.13
release-1.1.14
release-1.1.15
release-1.1.16
release-1.1.17
release-1.1.18
release-1.1.19
release-1.1.2
release-1.1.3
release-1.1.4
release-1.1.5
release-1.1.6
release-1.1.7
release-1.1.8
release-1.1.9
release-1.11.0
release-1.11.1
release-1.11.10
release-1.11.11
release-1.11.12
release-1.11.13
release-1.11.2
release-1.11.3
release-1.11.4
release-1.11.5
release-1.11.6
release-1.11.7
release-1.11.8
release-1.11.9
release-1.13.0
release-1.13.1
release-1.13.10
release-1.13.11
release-1.13.12
release-1.13.2
release-1.13.3
release-1.13.4
release-1.13.5
release-1.13.6
release-1.13.7
release-1.13.8
release-1.13.9
release-1.15.0
release-1.15.1
release-1.15.10
release-1.15.11
release-1.15.12
release-1.15.2
release-1.15.3
release-1.15.4
release-1.15.5
release-1.15.6
release-1.15.7
release-1.15.8
release-1.15.9
release-1.17.0
release-1.17.1
release-1.17.10
release-1.17.2
release-1.17.3
release-1.17.4
release-1.17.5
release-1.17.6
release-1.17.7
release-1.17.8
release-1.17.9
release-1.19.0
release-1.19.1
release-1.19.10
release-1.19.2
release-1.19.3
release-1.19.4
release-1.19.5
release-1.19.6
release-1.19.7
release-1.19.8
release-1.19.9
release-1.2.0
release-1.21.0
release-1.21.1
release-1.21.2
release-1.21.3
release-1.21.4
release-1.21.5
release-1.21.6
release-1.23.0
release-1.23.1
release-1.23.2
release-1.23.3
release-1.23.4
release-1.25.0
release-1.25.1
release-1.25.2
release-1.25.3
release-1.25.4
release-1.25.5
release-1.27.0
release-1.27.1
release-1.27.2
release-1.27.3
release-1.27.4
release-1.27.5
release-1.29.0
release-1.29.1
release-1.29.2
release-1.29.3
release-1.29.4
release-1.29.5
release-1.29.6
release-1.29.7
release-1.29.8
release-1.3.0
release-1.3.1
release-1.3.10
release-1.3.11
release-1.3.12
release-1.3.13
release-1.3.14
release-1.3.15
release-1.3.16
release-1.3.2
release-1.3.3
release-1.3.4
release-1.3.5
release-1.3.6
release-1.3.7
release-1.3.8
release-1.3.9
release-1.30.0
release-1.30.1
release-1.30.2
release-1.31.0
release-1.31.1
release-1.4.0
release-1.5.0
release-1.5.1
release-1.5.10
release-1.5.11
release-1.5.12
release-1.5.13
release-1.5.2
release-1.5.3
release-1.5.4
release-1.5.5
release-1.5.6
release-1.5.7
release-1.5.8
release-1.5.9
release-1.7.0
release-1.7.1
release-1.7.10
release-1.7.11
release-1.7.12
release-1.7.2
release-1.7.3
release-1.7.4
release-1.7.5
release-1.7.6
release-1.7.7
release-1.7.8
release-1.7.9
release-1.9.0
release-1.9.1
release-1.9.10
release-1.9.11
release-1.9.12
release-1.9.13
release-1.9.14
release-1.9.15
release-1.9.2
release-1.9.3
release-1.9.4
release-1.9.5
release-1.9.6
release-1.9.7
release-1.9.8
release-1.9.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42055.json"

Git / github.com/nginx/nginx-gateway-fabric

Affected ranges

Type
GIT
Repo
https://github.com/nginx/nginx-gateway-fabric
Events
Introduced
3a372747333fb1db372af7cf0b18ed7eef7c91f7
Last Affected
532db6a20b2912fe397211eef9f8d564d46a4bdd
Introduced
7dad8b31e3f0c3eadce36fed8c276e83e6583d24
Last Affected
c21b851ce4736865b098f868ba1de16362654dc5
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:f5:nginx_gateway_fabric:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "1.3.0"
        },
        {
            "last_affected":  "1.6.2"
        },
        {
            "introduced":  "2.0.0"
        },
        {
            "last_affected":  "2.6.3"
        }
    ],
    "source":  "CPE_RANGE"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42055.json"