NGINX CVE202642945 Exploited in the Wild Causing Worker Crashes and Possible RCE

A newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild days after its public disclosure according to VulnCheck The vulnerability tracked as CVE202642945 CVSS score 92 is a heap buffer overflow in ngxhttprewritemodule affecting NGINX versions 0627 through 1300 According to AInative security company depthfirst the