cve-2026-42533

CVE-2026-42533 — nginx 两遍捕获覆盖（two-pass capture clobbering） nginx 0.9.6–1.30.3 / mainline ≤1.31.2 pre-authentication heap overflow + information leak in the complex value script engine; CVSS 9.2. The same root cause has two trigger surfaces: HTTP regex location + regex map and stream sslpreread +...