NGINX ngx_http_rewrite_module vulnerability
CVSS score
8.1
EPSS probability
%3.4
Risk score
0.3
Published
5 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
A flaw was found in NGINX, specifically within the ngx_http_rewrite_module. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests under specific rewrite configurations. This can lead to a heap buffer overflow in the NGINX worker process, which may result in arbitrary code execution
Technical analysis of CVE-2026-42945 (NGINX Rift), a critical heap buffer overflow in NGINX's rewrite engine caused by a state mismatch between length calculation and copy operations, enabling worker crashes and potential remote code execution.
https://github.com/DepthFirstDisclosures/Nginx-Rift
hulina9900-boop/DIY-CVE-2026-42945-POC
nginx CVE scanner + RCE exploit framework (CVE-2026-42945 + 16 others)
Analisi tecnica e sfruttamento della vulnerabilità CVE-2026-42945 (Nginx Rift) per la compromissione di un server web in ambiente controllato.
Similar Vulnerabilities
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-42945"