{"uuid": "971780d6-4f19-4c46-a624-c3eb84d18fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42945", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/116572847528970537", "content": "The EasyEngine tutorial, StackPointer, WPMU DEV, Stack Overflow, and the WordPress.org forums all reference this same pattern.\nThis can easily be chained with one (or both) of two recent and trivial-to-exploit local privilege escalation Linux vulns.\nIn the words of @krypt3ia :\nwe doomed.\nHOWEVER: I threw together a small Bash script that tries to detect whether a given conf file or directory of nginx configs has vulnerable directives. You can find it at:\nhttps://git.sr.ht/~hrbrmstr/cve-2026-42945-scanner\u2026 (2/3)", "creation_timestamp": "2026-05-14T12:08:28.141923Z"}