CVE-2026-42055

🎯 CVE-2026-42055 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2026-42055 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send larg

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Klassifikation & Betroffenheit:

CWE-131 F5 NGINX Open Source 1.13.10 <1.31.2NGINX Plus 37.0 <37.0.2.1NGINX Plus R36 <R36 P6NGINX Open Source 1.30.2 <1.30.3f5 dos *f5 dos 4.9.0f5 nginx_gateway_fabric *f5 nginx_ingress_controller *

Incorrect Calculation of Buffer Size 🎯 High

The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.

🛡️ Empfohlene Mitigation: When allocating a buffer for the purpose of transforming, converting, or encoding an input, allocate enough memory to handle the largest possible encoding. For example, in a routine that converts "&" characters to "&" for HTML entity encoding, the output buffer needs to be at least 5 times as large as the input buf…

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-47 · Buffer Overflow via Parameter Expansion (High) CAPEC-100 · Overflow Buffers (Very High)

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2023-46747 9.8 CVE-2022-1388 9.8 CVE-2005-2103 9.8 CVE-2026-94127 9.3 CVE-2026-31806 9.3

🧪 Exploit-Evidenz:

🐙 HORKimhab/CVE-2026-42055

🇩🇪 BSI-Sicherheitshinweise: BSI · hoch · NGINX und NGINX Plus: Mehrere Schwachstellen ↗

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2026

Veröffentlicht 06/2026

Heute 21.10.

CVSS-Vektor-Analyse: 9.2

AV · Angriffsvektor Netzwerk

AC · Komplexität Hoch

PR · Privilegien Keine

UI · Interaktion Keine

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CNA-Bewertung (f5): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H — weicht vom Dossier-Score ab

Veröffentlicht:17.06.2026

Aktualisiert:14.09.2026 13:18

Assigner (CNA):f5

EUVD-ID:EUVD-2026-37718

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-131 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

Tier	CVEs	Anteil
≥90 %	726	0,2 %
≥50 %	3.223	0,9 %
≥10 %	22.086	5,9 %
<10 %	346.557	93,0 %

Tier

CVEs

Anteil

≥90 %

726

0,2 %

≥50 %

3.223

0,9 %

≥10 %

22.086

5,9 %

<10 %

346.557

93,0 %

Noch keine Analyse zu CVE-2026-42055

Beitrag zu CVE-2026-42055 verfassen

Zero-Day & Vulnerability Intelligence Hub