Hackers Exploit Critical NGINX RCE Vulnerability in the Wild

**Critical NGINX heap overflow (CVE-2026-42945) — active exploitation and PoC in the wild; emergency patching required.** A rewrite-module heap buffer overflow in NGINX (affecting versions 0.6.27–1.30.0) permits attacker-controlled URI data to overflow worker heap buffers, enabling persistent DoS for most deployments and conditional remote code execution on systems with ASLR disabled; PoC and active exploitation were observed within days of disclosure.