Nginx-poolslip Vulnerability Enables DoS and Code Execution Attacks — Patch Now!

A critical heap buffer overflow vulnerability (CVE-2026-9256, “nginx-poolslip”) in NGINX's ngx_http_rewrite_module allows remote unauthenticated attackers to cause worker crashes (DoS) and, in some conditions (ASLR disabled or bypassable), achieve code execution; the flaw impacts many NGINX Open Source and Plus releases and multiple downstream products, with proof-of-concept activity circulating—apply the listed updates or use named-capture mitigations immediately.