40 matches found
CVE-2026-42533
CVE-2026-42533 — Exploit PoC de desbordamiento de búfer en el montón de nginx Ejecución remota de código sin autenticación mediante la corrupción de capturas en dos pasadas PoC público liberado el 2026-07-27 — No esperes, aplica el parche ahora. | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 Crítico...
nginx: NGINX: Arbitrary code execution via crafted HTTP requests
A flaw was found in NGINX. An unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP requests when the map directive uses regular expression regex matching and references regex capture variables before referencing the map output variable. This can lead to a heap...
nginx: NGINX: Arbitrary code execution via crafted HTTP requests
A flaw was found in NGINX. An unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP requests when the map directive uses regular expression regex matching and references regex capture variables before referencing the map output variable. This can lead to a heap...
nginx: NGINX: Arbitrary code execution via crafted HTTP requests
A flaw was found in NGINX. An unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP requests when the map directive uses regular expression regex matching and references regex capture variables before referencing the map output variable. This can lead to a heap...
nginx: NGINX: Arbitrary code execution via crafted HTTP requests
A flaw was found in NGINX. An unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP requests when the map directive uses regular expression regex matching and references regex capture variables before referencing the map output variable. This can lead to a heap...
nginx-map-risk-audit
CVE-2026-42533: Revisión del riesgo de regex en map de NGINX Nota de investigación defensiva sobre CVE-2026-42533, un desbordamiento de búfer en el montón en el procesamiento de solicitudes de NGINX relacionado con directivas map con capturas de regex y ciertos patrones de evaluación de variables...
USN-8563-5 A security issue was fixed in nginx.
USN-8563-1 fixed vulnerabilities in nginx. The fix for CVE-2026-42533 was backed out in USN-8563-2 because it could cause a regression. This update includes a better fix for CVE-2026-42533. We apologize for the inconvenience. Original advisory details: It was discovered that nginx incorrectly...
nginx: NGINX: Arbitrary code execution via crafted HTTP requests
A flaw was found in NGINX. An unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP requests when the map directive uses regular expression regex matching and references regex capture variables before referencing the map output variable. This can lead to a heap...
CVE-2026-42533
NGINX Vulnerability Checker Script para verificar de forma no intrusiva si una instalación de NGINX podría estar afectada por la vulnerabilidad CVE-2026-42533. Importante: Este proyecto no explota la vulnerabilidad. Únicamente realiza comprobaciones locales sobre la versión instalada y la...
openSUSE 16 Security Update : nginx (openSUSE-SU-2026:21524-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21524-1 advisory. This update for nginx fixes the following issue - CVE-2026-42533: map directive and regex matching vulnerability bsc1271514. Tenable has extracted the...
Security update for nginx (important)
openSUSE security update: security update for nginx ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21524-1 Rating: important References: bsc1271514 Cross-References: CVE-2026-42533 CVSS scores: CVE-2026-42533 SUSE : 8.1...
SUSE-SU-2026:23140-1 Security update for nginx
This update for nginx fixes the following issue - CVE-2026-42533: map directive and regex matching vulnerability bsc1271514...
SUSE-SU-2026:23118-1 Security update for nginx
This update for nginx fixes the following issue - CVE-2026-42533: map directive and regex matching vulnerability bsc1271514...
OPENSUSE-SU-2026:21524-1 Security update for nginx
This update for nginx fixes the following issue - CVE-2026-42533: map directive and regex matching vulnerability bsc1271514...
SUSE SLES15 Security Update : nginx (SUSE-SU-2026:3448-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3448-1 advisory. - CVE-2026-42055: heap buffer overflow in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules bsc1268492. - CVE-2026-42533: heap...
Important: nginx
Issue Overview: A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...
Security update for nginx
This update for nginx fixes the following issues: CVE-2026-42055: heap buffer overflow in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules bsc1268492. CVE-2026-42533: heap buffer overflow in the map directive and regex matching bsc1271514. CVE-2026-48142: heap buffer overread in the...
SUSE-SU-2026:3448-1 Security update for nginx
This update for nginx fixes the following issues: - CVE-2026-42055: heap buffer overflow in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules bsc1268492. - CVE-2026-42533: heap buffer overflow in the map directive and regex matching bsc1271514. - CVE-2026-48142: heap buffer overread in the...
MGASA-2026-0301 Updated nginx packages fix security vulnerabilities
CVE-2026-42533: Heap buffer overflow might occur in a worker process when using the map directive with regex matching if the map variable was included in a string expression after a capture affected by this map; a similar issue might happen when using a non-cacheable variable in a string...
