CVE-2026-42945 - NGINX Rift: Critical Heap Buffer Overflow in NGINX
CVE-2026-42945, dubbed "NGINX Rift," is a critical (CVSS 9.2) heap buffer overflow vulnerability in the ngx_http_rewrite_module of NGINX Open Source, NGINX Plus, and related products. It is triggered when a specific rewrite configuration pattern—using an unnamed PCRE capture (e.g., $1) with a replacement string containing a question mark (?)—is combined with a subsequent rewrite, if, or set directive. Exploitation can lead to reliable worker process crashes (Denial of Service) and, under certain conditions such as disabled ASLR, unauthenticated Remote Code Execution (RCE)
Microsoft Sentinel (KQL)
