Hundreds of Millions Affected: New “nginx-poolslip” Zero-Day Weaponizes ASLR Bypass for Remote Code Execution

Nebula Security disclosed a critical zero-day called "nginx-poolslip" impacting Nginx 1.31.0 that uses remote heap probing, heap grooming, and an ASLR bypass to achieve remote code execution; a polished proof-of-concept video demonstrates obtaining an interactive shell with root-level access on a hardened Linux server. The exploit is unpatched upstream, the research team has embargoed full technical details pending an upstream patch, and the bulletin advises immediate containment measures (network segmentation, WAFs, EDR monitoring, and emergency patch preparedness).