Back to article

CVE-2026-42945 – Critical heap buffer overflow in Nginx ngx_HTTP_rewrite_module (opens in new tab)

Covers NGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old VulnerabilityCovered by 8 sources including lemmy.world, sh.itjust.worksDiscussed on Hacker News and Hacker News

Covers 1 related story

depthfirst.com·

NGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old Vulnerability

Discussed on Hacker News, Lobsters, and r/netsec

Covered in 9 articles

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

sh.itjust.works·

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

daemonology.net·

Daily Hacker News for 2026-05-15

Two bytes to RCE: chaining rift + PoolSlip into an ASLR-independent nginx 1.30.0 exploit

blog.outsider.ne.kr·

기술 뉴스 #294 : 26-05-16

news.risky.biz·

Risky Bulletin: Shai-Hulud goes open-source

In other languages

NGINX: DoS-Lücke wird angegriffen

Sicherheitslücke wird ausgenutzt: Hacker greifen Nginx-Webserver an

Webserver gefährdet: 18 Jahre alte Sicherheitslücke in Nginx entdeckt