CVE-2026-48095: 7-Zip NTFS Handler Heap-Write Overflow
CVE-2026-48095 is a heap-write overflow vulnerability in 7-Zip's NTFS handler, fixed in version 26.01. It was detailed by GitHub Security Lab with…
Tag: heap overflow
CVE-2026-9256: NGINX Rewrite Module Overlapping Captures Bug
A heap overflow in NGINX's rewrite module due to overlapping captures, disclosed in May 2026. Similar class of flaw as CVE-2026-42533, involving…
NGINX Core Server Affected by Critical Heap Overflow
NGINX versions 0.9.6 through 1.31.2 are vulnerable to CVE-2026-42533. Fixed in 1.30.4 and 1.31.3.
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
A public proof-of-concept (PoC) has been released for CVE-2026-55200, a critical vulnerability in the libssh2 client-side SSH library. The flaw, with a…
NGINX Plus Affected by Critical Vulnerability
NGINX Plus versions prior to 37.0.3.1 are vulnerable to CVE-2026-42533. Fixed in 37.0.3.1.
CVE-2026-42945: NGINX Rift Heap Overflow
A heap overflow in NGINX's expression-evaluation code, disclosed in May 2026. Similar class of flaw as CVE-2026-42533, involving two-pass script engine. Exploit…
F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
F5 has released security updates to address two critical vulnerabilities in NGINX Open Source that could allow remote code execution. The flaws,…
CVE-2026-42055: Heap Buffer Overflow in NGINX HTTP/2 Proxy and gRPC Modules
A critical heap-based buffer overflow in NGINX Open Source and NGINX Plus allows remote unauthenticated attackers to execute code when proxying HTTP/2…
Squid Cache Digest Heap Overflow
An unrelated heap overflow vulnerability in Squid's cache_digest functionality, patched in Squid 7.6.