🛡️ CVE-2026-42945

The items that name it 4

• Orca Security: nginx Flaw in 1.45M Tengine Servers (CVE-2026-42945 + CVE-2026-9256)
  writeupas cves2026-06-16

  Heap buffer overflow in ngx_http_script.c: a stale is_args flag leaks between chained rewrite rules, causing the length-calculation pass and write pass to disagree about buffer size. Function: ngx_http_script_regex_end_code(). Fixed in nginx 1.30.1 / 1.31.0 on May 13, 2026. Unauthenticated, single c

• NGINX Rift: Achieving NGINX RCE via an 18-Year-Old Vulnerability (CVE-2026-42945)
  writeupas cves2026-05-13

  Critical (CVSS 9.2) heap buffer overflow in ngx_http_rewrite_module; an unpropagated is_args flag during a rewrite and set sequence causes an undersized buffer allocation, and the copy phase writes attacker-controlled escaped URI data past the heap boundary, leading to RCE. Introduced in 2008, impac

• Vulnerability Garden
  toolas cves2026-05-13
• Three CVEs and the May 2026 Exploit Chain Nobody's Taking Seriously (nginx Rift)
  articleas classification.key entities