6788 matches found
NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE
A newly disclosed security flaw impacting NGINX Plus and NGINX Open Source has come under active exploitation in the wild, days after its public disclosure, according to VulnCheck. The vulnerability, tracked as CVE-2026-42945 CVSS score: 9.2, is a heap buffer overflow in ngxhttprewritemodule...
[SECURITY] [DSA 6278-1] nginx security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6278-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 16, 2026 https://www.debian.org/security/faq -...
CLSA-2026-1778888948 nginx: Fix of CVE-2026-42945
CVE-2026-42945: fix heap buffer overflow in ngxhttprewritemodule...
RHSA-2026:17794 Red Hat Security Advisory: nginx security update
Bulletin has no description...
RHSA-2026:17793 Red Hat Security Advisory: nginx:1.24 security update
Bulletin has no description...
RHSA-2026:17792 Red Hat Security Advisory: nginx security update
Bulletin has no description...
RHSA-2026:17790 Red Hat Security Advisory: nginx security update
Bulletin has no description...
RHSA-2026:17791 Red Hat Security Advisory: nginx security update
Bulletin has no description...
RHSA-2026:17753 Red Hat Security Advisory: nginx:1.26 security update
Bulletin has no description...
RHSA-2026:17752 Red Hat Security Advisory: nginx:1.24 security update
Bulletin has no description...
RHSA-2026:17751 Red Hat Security Advisory: nginx security update
Bulletin has no description...
Exploit for CVE-2026-42945
CVE-2026-42945 nginx 32-bit Exploit Lab This repository is a...
NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability
...
NGINX ngx_http_rewrite_module vulnerability
...
NGINX ngx_http_charset_module vulnerability
...
NGINX ngx_http_ssl_module vulnerability
...
NGINX ngx_quic_module vulnerability
...
CLSA-2026-1778895590 nginx: Fix of CVE-2026-42945
CVE-2026-42945: fix heap buffer overflow in ngxhttprewritemodule...
CVE-2026-42945: Imperva Customers Protected Against Critical NGINX Rewrite Module Vulnerability
TL;DR: Researchers recently disclosed CVE-2026-42945, a critical heap-based buffer overflow vulnerability affecting both NGINX Open Source and NGINX Plus. The flaw exists within the ngxhttprewritemodule component and can allow unauthenticated attackers to trigger denial-of-service conditions and...