this post was submitted on 14 May 2026

118 points (100.0% liked)

Selfhosted

selfhosted@lemmy.world

62,325 readers

5,950 active

1,232 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

moderators

ruud@lemmy.world

Loki@lemmy.world

CannaVet@lemmy.world

devve@lemmy.world

ayyy@sh.itjust.works

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE (thehackernews.com)

submitted 4 months ago* (last edited 4 months ago) by eager_eagle@lemmy.world to c/selfhosted@lemmy.world

15 comments fedilink hide all child comments

Update your nginx instances

cross-posted from: https://lemmy.world/post/46851448

Affected an non-affected versions https://nginx.org/en/security_advisories.html
CVE record https://www.cve.org/CVERecord?id=CVE-2026-42945
CVE details https://nvd.nist.gov/vuln/detail/CVE-2026-42945
PoC https://github.com/DepthFirstDisclosures/Nginx-Rift

CVE - Common Vulnerabilities and Exposures system
RCE - Remote Code Execution
PoC - Proof of Concept

you are viewing a single comment's thread
view the rest of the comments

[–] Nighed@feddit.uk 7 points 4 months ago (1 child)

Apparently not a massive deal? (I don't know, just linking someone who seems to have a clue)

https://cyberplace.social/@GossiTheDog/116578019563133410

hideshow 1 child comment

[–] eager_eagle@lemmy.world [S] 1 point 4 months ago

good to know!

parent