Critical NGINX vulnerability CVE-2026-42945 has been exploited by hackers. This vulnerability affects NGINX Open Source and NGINX Plus versions 0.6.27 to 1.30.0, potentially causing worker process crashes and enabling remote code execution (RCE) if ASLR protection is disabled. Ledger CTO Charles Guillemet stated that currently, less than 30% of servers are likely running the latest version of NGINX, and the vulnerability is spreading faster than IT teams can patch and upgrade. https://(wublock123.com)/news/ledger-cto-30-percent-servers-running-old-nginx-vulnerability-risk-61216