NGINX ngx_http_rewrite_module vulnerability
CVSS Skor
8.1
EPSS İhtimal
%3.4
Risk Skoru
0.3
Yayın
5 ay önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
A flaw was found in NGINX, specifically within the ngx_http_rewrite_module. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests under specific rewrite configurations. This can lead to a heap buffer overflow in the NGINX worker process, which may result in arbitrary code execution
Technical analysis of CVE-2026-42945 (NGINX Rift), a critical heap buffer overflow in NGINX's rewrite engine caused by a state mismatch between length calculation and copy operations, enabling worker crashes and potential remote code execution.
https://github.com/DepthFirstDisclosures/Nginx-Rift
hulina9900-boop/DIY-CVE-2026-42945-POC
nginx CVE scanner + RCE exploit framework (CVE-2026-42945 + 16 others)
Analisi tecnica e sfruttamento della vulnerabilità CVE-2026-42945 (Nginx Rift) per la compromissione di un server web in ambiente controllato.
İlgili Benzer Açıklar
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-42945"