ChPratik/NGINX_2026_CVE_Bundle_CTI_Report

PoC

Covered CVEs: CVE-2026-28755, CVE-2026-42926, CVE-2026-9256, CVE-2026-42055, CVE-2026-42533

view exploit source poc_in_githubauthor ChPratikpublished 2026-07-28catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-28755US	medium5.4OT elevated	0.14% (3rd)	Exploit	2026-03-24
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the ssl_verify_c…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.