Mastodawn

🔴 New security advisory:

CVE-2026-42945 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-42945-nginx-plus-heap-overflow-unauth-poc

#InfoSec #PatchNow #InfoSecCommunity

NGINX Plus heap overflow, unauth (CVE-2026-42945) [PoC]

CVE-2026-42945: NGINX Plus and Open Source heap buffer overflow via crafted HTTP request with PCRE captures. Update to fixed version.

Yazoul Security