NGINX CVE-2026-42945: active exploitation — worker crashes and RCE risk

Colleagues, please note: active exploitation of NGINX CVE-2026-42945 has begun.

Brief:
- Researchers (VulnCheck, depthfirst) discovered a heap buffer overflow in ngx_http_rewrite_module, affecting versions 0.6.27–1.30.0.
- Exploitation can crash worker processes or, with ASLR disabled and certain configurations, lead to RCE.
- AlmaLinux and others note reliable RCE is harder in typical setups, but DoS is feasible.
- Concurrent attacks target openDCIM vulnerabilities that can be chained to achieve RCE.

Why it matters: active exploitation demands urgent patching and configuration review.

What will be your next step to protect systems?

#cybersecurity #NGINX #vulnerabilities #infosec