NGINX Reserved Buffer Overflow: A Follow-Up to Over-Under Copy
An independent rediscovery of CVE-2026-93479: how regex capture changes let NGINX consume reserved space and overflow a path buffer after script evaluation.
1w4y / Security Engineering
I like figuring out how systems work. The interesting part starts when they don’t.
Security Engineering is my main thing. Security research is the part-time side quest.
From the rabbit hole
Latest research
↗
NGINX Over-Under Copy: Two-Pass Value Desynchronization in the HTTP Script Engine
Technical analysis of CVE-2026-42533: the NGINX two-pass value desynchronization root cause, RCE chain, affected versions, fixes, and detection.