{"uuid": "081c8fdf-1542-4711-9fdc-6a92b026aee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42945", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/116568862985647331", "content": "RE: https://infosec.exchange/@cR0w/116568840324508660\nPlenty of prerequisites but worth looking into.\nhttps://my.f5.com/manage/s/article/K000161019\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond its control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, for systems with Address Space Layout Randomization (ASLR ) disabled, code execution is possible. (CVE-2026-42945)", "creation_timestamp": "2026-05-13T19:14:52.543687Z"}