NGINX Rift CVE-2026-42945 scores 9.2 after 18 years, enabling unauthenticated RCE or DoS via crafted HTTP requests.
Morning Overview on MSN
An 18-year-old heap buffer overflow in NGINX gives attackers remote code execution — billions of devices run the affected module
A single rewrite rule, the kind pasted into NGINX configurations thousands of times a day, can hand an unauthenticated ...
NGINX is critically vulnerable: hackers can crash servers and run remote code with no authentication
A critical, 18-year-old vulnerability in the NGINX web server has been discovered, which allows unauthenticated attackers to ...
TL;DR: Researchers recently disclosed CVE-2026-42945, a critical heap-based buffer overflow vulnerability affecting both NGINX Open Source and NGINX Plus. The flaw exists within the ...
Exploit attempts are already hammering a newly disclosed NGINX bug dubbed "NGINX Rift," proving once again that attackers ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results