CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift - Exploit listo para HTB Exploit independiente para la vulnerabilidad de desbordamiento de búfer en el heap de NGINX descubierta en 2024. Esta versión está optimizada para entornos de HackTheBox y CTF donde no se pueden configurar contenedores Docker. Detalles de la...

nginx-cve-2026-42945-poc

CVE-2026-42945 — Desbordamiento de búfer en el montículo del Módulo Rewrite de NGINX → RCE RCE confirmado exitoso — mediante desbordamiento de montículo + inyección de proceso GDB, ejecuta comandos arbitrarios en los procesos worker de NGINX / OpenResty. Inicio rápido root@kitploit: 一键构建 NGINX 镜像...

CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Autor: Michael Sanji Winaya Prawiradibrata Co-Autor IA: Varanus — sahabatku Framework de explotación de desbordamiento de búfer de heap dirigido a ngxhttprewritemodule de NGINX. Una sola herramienta para reconocimiento + explotación. Sin dependencias...

Nginx-Rift

NGINX Rift Prueba de concepto de RCE para CVE-2026-42945 , un desbordamiento crítico de búfer en el montón en el módulo ngxhttprewritemodule de NGINX introducido en 2008. El error permite la ejecución remota de código no autenticada contra servidores que utilizan las directivas rewrite y set. Est...

CVE-2026-42945

CVE-2026-42945 — NGINX Rift Heap Buffer Overflow in NGINXngxhttprewritemodule...

CVE-2026-42945

CVE-2026-42945 - Análisis y reproducción de la vulnerabilidad NGINX Rift Resumen CVE-2026-42945 nombre en clave "NGINX Rift" es una vulnerabilidad de desbordamiento de búfer en el montón en ngxhttprewritemodule de NGINX, con una puntuación CVSS v4 de 9.2 Crítica. La vulnerabilidad fue descubierta...

ai-vuln-rediscovery-nginx-cve-2026-42945

Redescubrimiento asistido por IA de CVE-2026-42945 en nginx Este repositorio documenta un experimento reproducible de redescubrimiento de vulnerabilidad asistido por IA contra el módulo ngxhttprewritemodule de nginx, posteriormente asociado con CVE-2026-42945. El experimento es intencionalmente...

MiracleLinux 8 : nginx:1.24 (AXSA:2026-1164:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1164:01 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the...

RockyLinux 10 : nginx (RLSA-2026:29874)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:29874 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the RockyLin...

ROS-20260626-73-0020

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...

nginx: ngx_http_rewrite_module: code execution and denial of service

A flaw was found in the ngxhttprewritemodule module of NGINX. When a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures and a replacement string that references multiple such captures in a redirect or arguments context, an...

Exploit for CVE-2026-42945

CVE-2026-42945 - ngxhttprewritemodule module. This vulnerab...

ROS-20260609-73-0014

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260609-73-0007

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...

HPESBNW05064 rev.1 - Status of NGINX ngx_http_rewrite_module Vulnerability (CVE-2026-42945) in HPE Aruba Networking Products

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS, Unauthorized Code Execution, Unauthorized Execution of Arbitrary Code, Unauthorized Privileged Access, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave...

BIT-NGINX-2026-9256 NGINX ngx_http_rewrite_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

Self-Researched-POC

NGINX ngxhttpr...

SUSE CVE-2026-9256

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

CVE-2026-9256

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

CVE-2026-9256 NGINX ngx_http_rewrite_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...