New NGINX 0-Day RCE "nginx-poolslip" Affects Millions of NGINX Servers
New NGINX 0-Day RCE “nginx-poolslip” Affects Millions of NGINX Servers A newly disclosed zero-day remote code execution (RCE) vulnerability, dubbed nginx-poolslip, has been identified in NGINX version 1.31.0, the latest stable release of the widely deployed web server software. The discovery was made by security agent Vega, operating under the NebSec security team, and publicly disclosed via X (fo
NGINX Rift
CVE-2026-42945 · Heap-based Buffer Overflow · CVSS v4.0 9.2 (Critical) found autonomously by depthfirst NGINX Rift An 18 year old memory corruption flaw in NGINX Plus and NGINX Open Source lets an unauthenticated attacker crash worker processes or execute remote code with crafted HTTP requests. TL;DR A bug in the ngx_http_rewrite_module lets a remote, unauthenticated attacker corrupt the heap of a
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
https://x.com/i/status/2057071579876753643
