Back to article
The Hacker News

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE (opens in new tab)

Covers Nginx Rift: RCE via heap buffer overflow in rewrite module (CVE-2026-42945)Covered by 3 sources See all sources covering this story including lemmy.world, sh.itjust.works

Covers 1 related story

depthfirst.com·

Nginx Rift: RCE via heap buffer overflow in rewrite module (CVE-2026-42945)

Discussed on Hacker News and Hacker News
Feeds

Covered in 4 articles

lemmy.world·

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

Feeds
sh.itjust.works·

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

Feeds
sh.itjust.works·

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

Feeds
AboutDFIR·

InfoSec News Nuggets 05/14/2026 - AboutDFIR - The Definitive Compendium Project

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help