Nginx Rift: RCE via heap buffer overflow in rewrite module (CVE-2026-42945) (opens in new tab)

Covered by 6 sources including Comments on:, heise onlineDiscussed on Hacker News and Hacker News

An 18 year old memory corruption flaw in NGINX Plus and NGINX Open Source lets an unauthenticated attacker crash worker processes or execute remote code with crafted HTTP requests.

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 6 articles

Comments on:·

Hackers Actively Exploit ‘Nginx Rift’ Vulnerability Affecting NGINX, F5 Products

The Hacker News·

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

Malware Analysis, News and Indicators·

NGINX Rift (CVE-2026-42945): An 18-Year-Old Vulnerability That Lets Anyone Take Over Your Web Server

View all 6 ›