NGINX Reserved Buffer Overflow: A Follow-Up to Over-Under Copy
An independent rediscovery of CVE-2026-93479: how regex capture changes let NGINX consume reserved space and overflow a path buffer after script evaluation.
Topic / Tag
Vulnerability Research
Everything I’ve published about Vulnerability Research.
2 entries↗
NGINX Over-Under Copy: Two-Pass Value Desynchronization in the HTTP Script Engine
Technical analysis of CVE-2026-42533: the NGINX two-pass value desynchronization root cause, RCE chain, affected versions, fixes, and detection.