v4ltonn/CVE-2026-42530

PoC

Scanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP/3 QPACK encoder stream Use-After-Free (CVSS 9.2)

view exploit source poc_in_githubauthor v4ltonnpublished 2026-06-19catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-42530US	—	6.45% (94th)	Exploit	2026-06-17
NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.