Lucene search
+L

CVE-2026-9256

🗓️ 22 May 2026 14:11:41Reported by f5Type 
cve
 cve
🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 407 Views

Unauthenticated exploitation in nginx rewrite module causes heap overflow and possible code execution via overlapping regex captures in redirects.

Related
Detection
Affected
Refs
Social
NVD
Node
OR
f5nginx_open_sourceRange0.1.170.9.7
f5nginx_open_sourceRange1.0.01.30.2
f5nginx_plusRanger33r36continuous_releases
f5nginx_plusMatch37.0.0.1long-term_support
f5nginx_plusMatchr32-continuous_releases
f5nginx_plusMatchr32p1continuous_releases
f5nginx_plusMatchr32p2continuous_releases
f5nginx_plusMatchr32p3continuous_releases
f5nginx_plusMatchr32p4continuous_releases
f5nginx_plusMatchr32p5continuous_releases
f5nginx_plusMatchr32p6continuous_releases
f5nginx_plusMatchr36-continuous_releases
f5nginx_plusMatchr36p1continuous_releases
f5nginx_plusMatchr36p2continuous_releases
f5nginx_plusMatchr36p3continuous_releases
f5nginx_plusMatchr36p4continuous_releases
Node
OR
f5dosRange4.3.04.7.0nginx
f5dosMatch4.9.0nginx
f5nginx_gateway_fabricRange1.3.01.6.2
f5nginx_gateway_fabricRange2.0.02.6.2
f5nginx_ingress_controllerRange3.5.03.7.2continuous_releases
f5nginx_ingress_controllerRange4.0.04.0.1continuous_releases
f5nginx_ingress_controllerRange5.0.05.4.3continuous_releases
f5nginx_instance_managerRange2.17.02.22.1
f5wafRange4.10.04.16.0nginx
f5wafRange5.2.05.8.0nginx
f5wafRange5.9.05.13.0nginx
[
  {
    "vendor": "F5",
    "product": "NGINX Plus",
    "modules": [
      "ngx_http_rewrite_module"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "37.0",
        "lessThan": "37.0.1.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "R36",
        "lessThan": "R36 P5",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "R32",
        "lessThan": "R32 P7",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "F5",
    "product": "NGINX Open Source",
    "modules": [
      "ngx_http_rewrite_module"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "1.31.0",
        "lessThan": "1.31.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.30.0",
        "lessThan": "1.30.2",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0.1.17",
        "lessThanOrEqual": "0.9.7",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation