NGINX Poolslip: Rewrite Bug Still Open
CVE-2026-9256 (Poolslip) is a heap buffer overflow in NGINX's rewrite module affecting versions 0.1.17 through 1.31.0. Patching for Rift in May left you exposed. You need 1.30.2 or 1.31.1.
Nginx
3 articles tagged #nginx
Articles tagged Nginx
nginx patches buffer overflow in rewrite module, CVE-2026-9256
CVE-2026-9256: buffer overflow in the nginx rewrite module affects all versions to 1.31.0. Fixed in 1.30.2 stable and 1.31.1 mainline. Apply now.
NGINX Rift: 18-Year-Old Bug Enables Remote RCE
CVE-2026-42945 is a critical heap buffer overflow in NGINX's rewrite module, present since 2008. Unauthenticated remote attackers can crash worker processes or achieve RCE. Patch now.