NGINX Rift CVE-2026-42945 Worker Segfault Pattern

Danny Y@zendannyy

•updated Jun 7, 2026•0•0•10

Detects error-log indicators of active CVE-2026-42945 (NGINX Rift) exploitation attempts reported from May 2026: worker processes exiting on signal 11 after crafted requests against vulnerable rewrite configurations. Pair with access-log URI anomaly rules on internet-facing NGINX.