▲ 118 ▼ 18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE (thehackernews.com) submitted 4 months ago* (last edited 4 months ago) by eager_eagle@lemmy.world to c/selfhosted@lemmy.world 15 comments fedilink hide all child comments Update your nginx instances cross-posted from: https://lemmy.world/post/46851448 Affected an non-affected versions https://nginx.org/en/security_advisories.html CVE record https://www.cve.org/CVERecord?id=CVE-2026-42945 CVE details https://nvd.nist.gov/vuln/detail/CVE-2026-42945 PoC https://github.com/DepthFirstDisclosures/Nginx-Rift CVE - Common Vulnerabilities and Exposures system RCE - Remote Code Execution PoC - Proof of Concept
[–] forbiddenlake@lemmy.world 4 points 4 months ago Probably yeah https://security-tracker.debian.org/tracker/CVE-2026-42945 permalink fedilink source parent