Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-9256

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-9256.

Coverage Span: 2026-05-25
Reports: 1 related reports

Associated Reports & Timeline

CVE-2026-9256 — NGINX ngx_http_rewrite_module Overlapping PCRE Captures Heap Buffer Overflow RCE

CVE-2026-9256: nginx rewrite-module heap overflow when overlapping PCRE captures re-expand—giving heap-write and info-leak primitives for a viable RCE path; fixed in 1.31.1 and 1.30.2.