CVE-2026-42945 – Critical heap buffer overflow in Nginx ngx_HTTP_rewrite_module (opens in new tab)

Covers NGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old VulnerabilityCovered by 8 sources including lemmy.world, sh.itjust.worksDiscussed on Hacker News and Hacker News

exploit for CVE-2026-42945. Contribute to DepthFirstDisclosures/Nginx-Rift development by creating an account on GitHub.

Read the original article

Sign in to keep reading the full article.

Covered in 9 articles

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

sh.itjust.works·

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

daemonology.net·

Daily Hacker News for 2026-05-15