18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE (opens in new tab)

Covers 2 stories including CVE-2026-42945 – Critical heap buffer overflow in Nginx ngx_HTTP_rewrite_module

submitted by eager_eagle to selfhosted4 points | 0 comments from: lemmy.world/post/46851448 Affected an non-affected versions nginx.org/en/security_advisories.html CVE details nvd.nist.gov/vuln/detail/CVE-2026-42945 PoC github.com/DepthFirstDisclosures/Nginx-Rift

Read the original article