18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

Update your nginx instances

cross-posted from: https://lemmy.world/post/46851448

• Affected an non-affected versions https://nginx.org/en/security_advisories.html
• CVE record https://www.cve.org/CVERecord?id=CVE-2026-42945
• CVE details https://nvd.nist.gov/vuln/detail/CVE-2026-42945
• PoC https://github.com/DepthFirstDisclosures/Nginx-Rift

CVE - Common Vulnerabilities and Exposures systemRCE - Remote Code ExecutionPoC - Proof of Concept