CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift — Эксплойт для HTB Автономный эксплойт для уязвимости переполнения кучи NGINX, обнаруженной в 2024 году. Эта версия оптимизирована для окружений HackTheBox и CTF, где невозможно настроить Docker-контейнеры. Детали уязвимости CVE-2026-42945 — это критическое переполнение...

ai-vuln-rediscovery-nginx-cve-2026-42945

nginx에서 CVE-2026-42945의 AI 지원 재발견 이 저장소는 nginx ngxhttprewritemodule에 대한 재현 가능한 AI 지원 취약점 재발견 실험을 문서화하며, 이후 CVE-2026-42945와 연결되었습니다. 실험은 의도적으로 범위를 좁혔습니다. 취약한 파일인 src/http/ngxhttpscript.c가 모델에 직접 제공되어 감사audit되었습니다. 이는 AI 시스템이 전체 nginx 코드베이스에서 처음부터 자율적으로 문제를 찾았다는 주장이 아닙니다. 요약 감사된 버그는 nginx rewrite 처...

nginx-cve-2026-42945-poc

CVE-2026-42945 — NGINX Rewrite Module ヒープバッファオーバーフロー → RCE RCE 確認済み — ヒープオーバーフロー + GDB プロセス注入により、NGINX / OpenResty のワーカープロセスで任意のコマンドを実行する。 クイックスタート root@kitploit: 一键构建 NGINX 镜像 + 执行 RCE 测试 ./run.sh nginx 一键构建 OpenResty 镜像 + 执行 RCE 测试 ./run.sh openresty 自定义命令 ./run.sh nginx 'cat /etc/passwd'...

CVE-2026-42945

RIFT — 원격 주입 및 결함 트리거 Remote Injection & Fault Trigger 저자: Michael Sanji Winaya Prawiradibrata AI 공동 저자: Varanus — sahabatku NGINX의 ngxhttprewritemodule을 대상으로 하는 힙 버퍼 오버플로우 익스플로잇 프레임워크. 정찰 + 익스플로잇을 하나로 통합한 도구. 외부 의존성 없음. 저장소 내용 파일| 설명 ---|--- rift.py| 메인 도구. 정찰recon과 익스플로잇exploit을 하나의 스크립트로 결합...

Nginx-Rift

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...

CVE-2026-42945

CVE-2026-42945 — NGINX Rift NGINXngxhttprewritemodule におけるヒープバッファオーバーフロー...

CVE-2026-42945

CVE-2026-42945 - NGINX Rift 취약점 분석 및 재현 개요 CVE-2026-42945코드명 "NGINX Rift"는 NGINX ngxhttprewritemodule에 존재하는 힙 버퍼 오버플로 취약점으로, CVSS v4 점수 9.2Critical입니다. 이 취약점은 depthfirst 보안 연구팀이 2026년 4월에 발견했으며, 2008년 NGINX 0.6.27 버전에서 도입된 후 18년 동안 잠복했습니다. 영향 범위 NGINX Open Source 0.6.27 1.30.0 NGINX Plus R32 R36...

MiracleLinux 8 : nginx:1.24 (AXSA:2026-1164:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1164:01 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the...

ROS-20260626-73-0020

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...

RockyLinux 10 : nginx (RLSA-2026:29874)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:29874 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the RockyLin...

nginx: ngx_http_rewrite_module: code execution and denial of service

A flaw was found in the ngxhttprewritemodule module of NGINX. When a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures and a replacement string that references multiple such captures in a redirect or arguments context, an...

Exploit for CVE-2026-42945

CVE-2026-42945 - ngxhttprewritemodule module. This vulnerab...

ROS-20260609-73-0014

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

HPESBNW05064 rev.1 - Status of NGINX ngx_http_rewrite_module Vulnerability (CVE-2026-42945) in HPE Aruba Networking Products

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS, Unauthorized Code Execution, Unauthorized Execution of Arbitrary Code, Unauthorized Privileged Access, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave...

ROS-20260609-73-0007

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...

BIT-NGINX-2026-9256 NGINX ngx_http_rewrite_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

Self-Researched-POC

NGINX ngxhttpr...

SUSE CVE-2026-9256

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

CVE-2026-9256

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

CVE-2026-9256 NGINX ngx_http_rewrite_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...