{"uuid": "dbdcbcc1-9578-44cf-a122-80008eeb0c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42945", "type": "seen", "source": "https://bsky.app/profile/hacker-news-jp.bsky.social/post/3mlutl3ar262c", "content": "\ud83d\udca1 Summary: \n\nNGINX\u306engx_http_rewrite_module\u306b\u8d77\u56e0\u3059\u308b\u6df1\u523b\u306a\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e RCE PoC\u304c\u516c\u958b\u3055\u308c\u3001rewrite\u3068set\u30c7\u30a3\u30ec\u30af\u30c6\u30a3\u30d6\u3092\u5229\u7528\u3059\u308b\u672a\u8a8d\u8a3c\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\uff08CVE-2026-42945\uff09\u306e\u4ed6\u3001\u540c\u69d8\u306e\u30e1\u30e2\u30ea\u7834\u58ca\u554f\u984c\u304c\u8a084\u4ef6\u5831\u544a\u3055\u308c\u305f\u3002\u8106\u5f31\u6027\u306f\u30012-pass\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u30a8\u30f3\u30b8\u30f3\u306e\u9577\u3055\u8a08\u7b97\u3068\u30b3\u30d4\u30fc\u51e6\u7406\u306e\u9593\u3067is_args\u306e\u6271\u3044\u304c\u4e0d\u6574\u5408\u306b\u306a\u308b\u3053\u3068\u3067\u3001\u653b\u6483\u8005\u5236\u5fa1\u306eURI\u30c7\u30fc\u30bf\u3092\u7528\u3044\u305f\u30d2\u30fc\u30d7\u9818\u57df\u306e\u7834\u58ca\u3092\u62db\u304d\u3001ngx_pool_cleanup_s\u3092\u4ecb\u3057\u3066system()\u3092\u5b9f\u884c\u3055\u305b\u308b\u6d41\u308c\u3092\u5229\u7528\u3059\u308b\u3002 (1/2)", "creation_timestamp": "2026-05-15T07:44:49.224725Z"}