NGINX Rift Exploit PoC Released for Critical CVE-2026-42945 RCE by Depthfirst. GitHub (github.com)
from UnLocoPoco@lemmy.world to cybersecurity@infosec.pub on 29 Jul 18:46
https://lemmy.world/post/50054156

RCE Proof of concept for CVE-2026-42945, a critical heap buffer overflow in NGINX’s ngx_http_rewrite_module introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives.

#cybersecurity