18YearOld NGINX Rewrite Module Flaw Enables Unauthenticated RCE

Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open including a critical flaw that remained undetected for 18 years The vulnerability discovered by depthfirst is a heap buffer overflow issue impacting ngxhttprewritemodule CVE202642945 CVSS v4 score 92 that could allow an attacker to achieve remote code execution or cause a