{ads}

›

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

Written By Wednesday, 13 May 2026 Add Comment



May 14, 2026 at 11:30AM

Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open, including a critical flaw that remained undetected for 18 years. The vulnerability, discovered by depthfirst, is a heap buffer overflow issue impacting ngx_http_rewrite_module (CVE-2026-42945, CVSS v4 score: 9.2) that could allow an attacker to achieve remote code execution or cause a

from The Hacker News https://ift.tt/goWJnLz

0 Response to "18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE"

Post a Comment

Subscribe to: Post Comments (Atom)

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads