Secure Bulletin Navigating the cyber sea with knowledge
Home > Tag > nginx-poolslip
#nginx-poolslip

CVE-2026-9256 “nginx-poolslip”: Critical NGINX Flaw Enables Unauthenticated DoS and Code Execution

25 May 2026  |  dark6  |  Vulnerability

A critical heap buffer overflow in the NGINX rewrite module (CVE-2026-9256, "nginx-poolslip") allows unauthenticated remote attackers to crash NGINX workers or execute code. Proof-of-concept activity is already circulating...

>> read more