Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-42530 — Scanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP/3 QPACK encoder stream Use-After-Free (CVSS 9.2) | Kitploit
Tools/GitHubGitHub/v4ltonn/cve-2026-42530
Vulnerability AnalysisExploitationWeb SecurityFuzzingNetwork Security
GitHubv4ltonn/cve-2026-42530

CVE-2026-42530

Scanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP/3 QPACK encoder stream Use-After-Free (CVSS 9.2)

View Repository
422 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-42530

Scanner for CVE-2026-42530, a use-after-free in nginx's HTTP/3 module.

Affected: nginx 1.31.0, 1.31.1
Fixed: nginx 1.31.2

Usage

root@kitploit:~
pip install aioquic

python3 scanner_CVE-2026-42530.py <host> [port]
python3 scanner_CVE-2026-42530.py --file hosts.txt

How it works

Opens two QPACK encoder streams on the same connection. Patched versions reject the second one with 0x103. Vulnerable versions accept it, write into freed memory, and return 0x201.

Disclaimer

Only use on systems you own or have permission to test.

Author

Valton Tahiri (@v4ltonn)

Download Tool