<![CDATA[https://depthfirst.com/nginx-rift]]>

Link Preview Image
NGINX Rift

An 18 year old memory corruption flaw in NGINX Plus and NGINX Open Source lets an unauthenticated attacker crash worker processes or execute remote code with crafted HTTP requests.

favicon

(depthfirst.com)

Anyone running nginx? Noone does that right?

]]>https://board.circlewithadot.net/topic/83a61cdf-5893-418c-a965-39da5323241b/https-depthfirst.com-nginx-riftRSS for NodeFri, 15 May 2026 05:38:10 GMTThu, 14 May 2026 09:43:27 GMT60<![CDATA[Reply to https://depthfirst.com/nginx-rift on Thu, 14 May 2026 10:37:27 GMT]]>@mcfly if anyone is I’ve made a plugin for gixy-next to check for the rewrite directives that might be an issue.

Stephen Paulger (@aimaz@mstdn.social)

If anyone is worrying about their NGINX configs because of CVE-2026-42945 I’ve made a fork of gixy-next with a plugin to help find rewrite configs that might be a problem. https://github.com/stephenpaulger/Gixy-Next/tree/add-unnamed-group-plugin I’ll send a merge request but in the meantime my fork’s branch might be useful. Obviously, don’t just trust me, review my change, it’s small enough. #nginx #CyberSecurity #cve_2026_42945

favicon

Mastodon 🐘 (mstdn.social)

]]>https://board.circlewithadot.net/post/https://mstdn.social/users/aimaz/statuses/116572490785309994https://board.circlewithadot.net/post/https://mstdn.social/users/aimaz/statuses/116572490785309994Thu, 14 May 2026 10:37:27 GMT<![CDATA[Reply to https://depthfirst.com/nginx-rift on Thu, 14 May 2026 09:52:48 GMT]]>@mcfly

> The bug is reachable only when an unnamed PCRE capture is paired with a replacement string that contains a question mark, followed by a rewrite, if, or set directive in the same scope.

… Gesundheit?

]]>https://board.circlewithadot.net/post/https://chaos.social/users/equinox/statuses/116572315202890589https://board.circlewithadot.net/post/https://chaos.social/users/equinox/statuses/116572315202890589Thu, 14 May 2026 09:52:48 GMT<![CDATA[Reply to https://depthfirst.com/nginx-rift on Thu, 14 May 2026 09:49:19 GMT]]>@mcfly the vulnerable rewrite looks suspicious even without the flaw 😄

]]>https://board.circlewithadot.net/post/https://chaos.social/users/cy/statuses/116572301519588073https://board.circlewithadot.net/post/https://chaos.social/users/cy/statuses/116572301519588073Thu, 14 May 2026 09:49:19 GMT