CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift - HTB対応エクスプロイト 2024年に発見されたNGINXのヒープバッファオーバーフロー脆弱性のためのスタンドアロンエクスプロイト。このバージョンは、DockerコンテナをセットアップできないHackTheBoxやCTF環境向けに最適化されています。 脆弱性の詳細 CVE-2026-42945 は、2008年（バージョン0.6.27）から存在するNGINXの ngxhttprewritemodule における深刻なヒープバッファオーバーフローです。このバグは以下の場合に発生します： 1. rewrite ディレクティブの置換文字列に...

nginx-cve-2026-42945-poc

CVE-2026-42945 — NGINX Rewrite Module ヒープバッファオーバーフロー → RCE RCE 確認済み — ヒープオーバーフロー + GDB プロセス注入により、NGINX / OpenResty のワーカープロセスで任意のコマンドを実行する。 クイックスタート root@kitploit: 一键构建 NGINX 镜像 + 执行 RCE 测试 ./run.sh nginx 一键构建 OpenResty 镜像 + 执行 RCE 测试 ./run.sh openresty 自定义命令 ./run.sh nginx 'cat /etc/passwd'...

Nginx-Rift

NGINX Rift CVE-2026-42945 のRCE Proof of Conceptです。これは2008年に導入されたNGINXの ngxhttprewritemodule における深刻なヒープバッファオーバーフローです。このバグにより、rewrite および set ディレクティブを使用しているサーバーに対して、未認証のリモートコード実行が可能になります。 この脆弱性は、他の3件のメモリ破壊の問題（CVE-2026-42946、CVE-2026-40701、CVE-2026-42934）とともに、depthfirst...

CVE-2026-42945

RIFT — リモートインジェクション＆フォールトトリガー 著者: Michael Sanji Winaya Prawiradibrata AI共著者: Varanus — わが友 NGINXのngxhttprewritemoduleを標的としたヒープバッファオーバーフローエクスプロイトフレームワーク。 偵察＋エクスプロイトを1つのツールに。外部依存ゼロ。 リポジトリの内容 ファイル| 説明 ---|--- rift.py| メインツール。 偵察＋エクスプロイトを1つのスクリプトに統合（1026行）。 README.md| 本ドキュメント。 必要環境 Python...

CVE-2026-42945

CVE-2026-42945 — NGINX Rift NGINXngxhttprewritemodule におけるヒープバッファオーバーフロー...

CVE-2026-42945

CVE-2026-42945 - NGINX Rift 脆弱性の分析と再現 概要 CVE-2026-42945（コードネーム「NGINX Rift」）は、NGINX の ngxhttprewritemodule に存在するヒープバッファオーバーフロー 脆弱性であり、CVSS v4 スコアは 9.2（Critical） です。 この脆弱性は depthfirst セキュリティ研究チームにより2026年4月に発見され、2008年に NGINX 0.6.27 で導入されて以来、18年間 潜伏していました。 影響範囲 NGINX Open Source 0.6.27 1.30.0 NGINX...

ai-vuln-rediscovery-nginx-cve-2026-42945

nginx에서 CVE-2026-42945의 AI 지원 재발견 이 저장소는 nginx ngxhttprewritemodule에 대한 재현 가능한 AI 지원 취약점 재발견 실험을 문서화하며, 이후 CVE-2026-42945와 연결되었습니다. 실험은 의도적으로 범위를 좁혔습니다. 취약한 파일인 src/http/ngxhttpscript.c가 모델에 직접 제공되어 감사audit되었습니다. 이는 AI 시스템이 전체 nginx 코드베이스에서 처음부터 자율적으로 문제를 찾았다는 주장이 아닙니다. 요약 감사된 버그는 nginx rewrite 처...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-42945 DESCRIPTION: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite...

MiracleLinux 8 : nginx:1.24 (AXSA:2026-1164:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1164:01 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the...

ROS-20260626-73-0020

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...

RockyLinux 10 : nginx (RLSA-2026:29874)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:29874 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the RockyLin...

nginx: ngx_http_rewrite_module: code execution and denial of service

A flaw was found in the ngxhttprewritemodule module of NGINX. When a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures and a replacement string that references multiple such captures in a redirect or arguments context, an...

Exploit for CVE-2026-42945

CVE-2026-42945 - ngxhttprewritemodule module. This vulnerab...

ROS-20260609-73-0014

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260609-73-0007

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...

HPESBNW05064 rev.1 - Status of NGINX ngx_http_rewrite_module Vulnerability (CVE-2026-42945) in HPE Aruba Networking Products

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS, Unauthorized Code Execution, Unauthorized Execution of Arbitrary Code, Unauthorized Privileged Access, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave...

BIT-NGINX-2026-9256 NGINX ngx_http_rewrite_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

Self-Researched-POC

NGINX ngxhttpr...

SUSE CVE-2026-9256

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

CVE-2026-9256

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...