Last seen May 14, 2026

F5 DoS for Nginx heap buffer overflow Vulnerability

AI agent finds 18-year-old remote code execution flaw in Nginx csoonline.com

Technical Severity
Medium severity
Lifecycle Status

STABLE

Sources

What Happened

AI agent finds 18-year-old remote code execution flaw in Nginx csoonline.com

Why This Matters

Publisher reporting describes a security event affecting F5. BugSkan could not yet bind a CVE or affected version, so treat the source details as the current record.

Recommended Action

Confirm whether F5 is present in your environment, compare your versions against the report, and apply available vendor patches or mitigations.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

May 14, 2026 12:30

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: PROOF_OF_CONCEPT

Primary entities:

F5GitHubF5 DoS for NginxF5 WAF for NginxNginxNginx App Protect DoS

Authoritative Intelligence

CVE CVE-2026-40701, CVE-2026-42934, CVE-2026-42945 +1 Incident identifier

EPSS is a vulnerability exploitation probability signal, not proof that your environment is exposed. CISA KEV means known exploitation of the vulnerability, not that your system was exploited.

Public GitHub References

Search GitHub for public repositories that mention this CVE. BugSkan only lists repository metadata as a defensive awareness signal — it does not fetch or display exploit code.

CVE-2026-40701 on GitHub CVE-2026-42934 on GitHub CVE-2026-42945 on GitHub CVE-2026-42946 on GitHub

CVE-2026-42945: 6 public repository references found.

cipherspy/CVE-2026-42945-POC

Possible public PoC reference

exploit for CVE-2026-42945

64 stars · Python

Open repository
p3Nt3st3r-sTAr/CVE-2026-42945-POC

Possible public PoC reference

GitHub repository for an AI tooling project

15 stars · Python

Open repository
forxiucn/nginx-cve-2026-42945-poc

Possible public PoC reference

GitHub repository for an AI tooling project

1 stars · C

Open repository
F2u0a0d3/CVE-2026-42945-nginx-rift-poc

Possible public PoC reference

PoC for CVE-2026-42945 (nginx Rift) — heap buffer overflow in ngx_http_rewrite_module. Includes detect/probe/exploit modes, dual-fixture Docker lab, empirical address discovery, OOB-verified offset sweep. Original disclosure by depthfirst.

1 stars · Python

Open repository
hulina9900-boop/DIY-CVE-2026-42945-POC

Possible public PoC reference

GitHub repository for an AI tooling project

0 stars · Python

Open repository
sec-sys/CVE-2026-42945-Reverse-Shell-POC

Possible public PoC reference

Python RCE PoC with reverse-shell listener for CVE-2026-42945 (NGINX Rift)

0 stars · Python

Open repository

A public PoC or exploit-related repository means weaponization material may exist in the open. It does not prove your environment was targeted.

Timeline

  • Incident first seen
    May 14, 2026 12:30

    BugSkan first recorded this incident.

  • AI agent finds 18-year-old remote code execution flaw in Nginx - csoonline.com
    May 14, 2026 12:30

    news.google.com · Vulnerability

Sources

AI agent finds 18-year-old remote code execution flaw in Nginx - csoonline.com

news.google.com · May 14, 2026 12:30

AI agent finds 18-year-old remote code execution flaw in Nginx csoonline.com

Open publisher source

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

← Back to incident intelligence