CVE-2026-9256 “nginx-poolslip”: Critical NGINX Flaw Enables Unauthenticated DoS and Code Execution

A critical heap buffer overflow in the NGINX rewrite module (CVE-2026-9256, “nginx-poolslip”) allows unauthenticated remote attackers to crash NGINX workers or execute code. Proof-of-concept activity is already circulating — patch to version 1.30.2/1.31.1 immediately.

Leggi sul sito originale →

Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.