Critical NGINX Vulnerability Targeted in Cyberattacks

According to VulnCheck, NGINX vulnerability CVE-2026-42945 has been actively exploited in the wild after its disclosure. The flaw can cause NGINX worker-process crashes and, under certain conditions, allow remote code execution. Exploitation attempts targeting two critical openDCIM vulnerabilities have also been observed; the objectives of that activity are unknown.