nginx

Two bytes to RCE: chaining rift + PoolSlip into an ASLR-independent nginx 1.30.0 exploit

by

Author: y198 (published on the Verichains blog) Published: June 6, 2026 Source: https://blog.verichains.io/p/two-bytes-to-rce-chaining-rift-poolslip Summary This Verichains writeup chains two separately disclosed nginx rewrite-engine memory-corruption bugs — CVE-2026-42945 (“rift”), a heap-overflow write primitive, and CVE-2026-9256 (“PoolSlip”), a heap over-read leak primitive — into a single remote code execution exploit against nginx 1.30.0 that works with ASLR … Read more

Finding six NGINX vulnerabilities with open models

by

Author: Mufeed VH (Co-founder & CEO, Winfunc) Published: July 23, 2026 Source: https://winfunc.com/research/endginx Summary Winfunc ran its autonomous vulnerability-research agent, driven by the open models GLM-5.1 and GLM-5.2 (from Z.AI), against the NGINX source tree. The scan produced six security findings carrying five CVE identifiers: two heap overflows in the HTTP/2 upstream request builders, one … Read more