CVE-2026-42530: Critical NGINX HTTP/3 Flaw Can Trigger DoS and Possible RCE

F5 has released out-of-band security updates to address multiple NGINX Vulnerabilities, including CVE-2026-42530, a critical issue in the ngx_http_v3_module that can be exploited by a remote, unauthenticated attacker. The flaw is a use-after-free condition in NGINX’s HTTP/3 implementation that can cause worker-process restarts and denial of service, and in environments where ASLR is disabled or can be bypassed, may also open a path to arbitrary code execution. The issue is…