9.2
/ 10
CRITICAL
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N
Description
CVE-2026-42945-Nginx-RCE-bypass-ASLR CVE-2026-42945 turns a 17-year-old NGINX rewrite bug into remote code execution — even with ASLR on, by chaining the heap overflow with live worker memory read through a common file-read flaw...
Basic Information
ID
484E31EB-CAAE-5718-9941-EC1ADD9B203C
Published
May 25, 2026 at 12:06
Modified
May 25, 2026 at 12:10