Nginx

5 posts

Nginx Map Regex Flaw Lets One Request Take Over a Server

July 21, 2026

For 15 years, a single crafted web request could quietly take over an nginx server, the software that receives and routes incoming traffic for roughly a third …

HTTP/2 Bomb Takes Down nginx Apache IIS Envoy and Cloudflare

June 3, 2026

A new exploit called HTTP/2 Bomb lets one ordinary home computer take down nginx, Apache, Microsoft IIS, Envoy and Cloudflare Pingora, the web servers behind a …

/nginx-rift-cve-2026-42945/featured-image.png

NGINX Has Had This Bug Since 2008 and One Request Is Enough to Trigger It

May 14, 2026

NGINX Rift: An 18-year-old memory corruption bug in NGINX, the web server running on roughly one-third of all websites globally, lets an unauthenticated …

/nginx-ui-mcpwn-cve-2026-33032/featured-image.png

Nginx-UI MCPwn (CVE-2026-33032): Full Server Takeover With One Unauthenticated Request

April 16, 2026

A critical vulnerability in nginx-ui has been actively exploited since March 2026, and it gives any attacker on the network full control over the nginx server …

/nginx-hijacking-no-malware/featured-image.png

Hackers Are Hijacking NGINX Servers Without Installing Malware

February 5, 2026

Hackers are hijacking NGINX web servers and rerouting live traffic through their own infrastructure. No malware installed, no vulnerability exploited. Just a …