A single rewrite rule, the kind pasted into NGINX configurations thousands of times a day, can hand an unauthenticated ...
An 18-year-old flaw in the NGINX open-source web server, discovered using an autonomous scanning system, can be exploited for ...
For roughly 18 years, a chunk of code inside one of the internet’s most popular web servers quietly carried a critical ...
NGINX Rift CVE-2026-42945 scores 9.2 after 18 years, enabling unauthenticated RCE or DoS via crafted HTTP requests.
Researchers at code vulnerability analysis firm Depthfirst analysed the source code for NGINX using their artificial ...