{"id":65603,"date":"2026-08-03T10:08:55","date_gmt":"2026-08-03T17:08:55","guid":{"rendered":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/"},"modified":"2026-08-03T10:08:55","modified_gmt":"2026-08-03T17:08:55","slug":"cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per","status":"publish","type":"post","link":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/","title":{"rendered":"CVE-2026-42945 (NGINX Rift): Heap Buffer Overflow in the Rewrite Module &#8211; Advisory + Nuclei Detection"},"content":{"rendered":"<p>On May 13, 2026, F5 and the research team at depthfirst jointly disclosed <strong>CVE-2026-42945<\/strong>, a critical heap buffer overflow in NGINX&#8217;s rewrite module. It was given the name <strong>NGINX Rift<\/strong>. An unauthenticated attacker triggers it with a single crafted HTTP request, the worker process crashes, and where ASLR is disabled or bypassable, code execution is on the table. The bug was introduced in NGINX 0.6.27 in 2008, which means it sat in the world&#8217;s most-deployed web server for roughly <strong>18 years<\/strong> before anyone noticed. Exploitation has been reported in the wild.<\/p>\n<p>This advisory is three things at once. First, a plain-English explanation of what NGINX Rift actually is and which builds are affected. Second, a ready-to-run <strong>Nuclei detection template<\/strong> you can copy, paste and scan with today, plus a second template that answers the question version detection cannot: whether your configuration actually reaches the vulnerable code. Third, a walkthrough of how to find every unpatched NGINX instance across an attack surface with <a href=\"\/wordpress\/sn1per-professional-2026\/\">Sn1per<\/a>, including the ones nobody remembers deploying.<\/p>\n<p>There is one thing we want to put up front, because it is the single most consequential detail in this advisory and it is missing from most coverage: <strong>upgrading to the version that fixes NGINX Rift leaves you exposed to a worse bug.<\/strong> More on that below.<\/p>\n<h2 id=\"at-a-glance\">CVE-2026-42945 at a glance<\/h2>\n<ul>\n<li><strong>CVE:<\/strong> CVE-2026-42945, &#8220;NGINX Rift&#8221; &#8211; heap-based buffer overflow (CWE-122) in <code>ngx_http_rewrite_module<\/code>.<\/li>\n<li><strong>Impact:<\/strong> unauthenticated worker-process crash from a single HTTP request. Denial of service through crash or restart loop; remote code execution where ASLR is disabled or bypassable.<\/li>\n<li><strong>CVSS:<\/strong> 9.2 Critical under CVSS 4.0, 8.1 High under CVSS 3.1.<\/li>\n<li><strong>Affected:<\/strong> every build from <strong>0.6.27 through 1.30.0<\/strong>, plus NGINX Plus R32 through R36, plus every downstream that ships the same <code>ngx_http_script.c<\/code>.<\/li>\n<li><strong>Fixed:<\/strong> <strong>1.30.1<\/strong> (stable) and <strong>1.31.0<\/strong> (mainline). NGINX Plus R37, R36 P4 or R32 P6.<\/li>\n<li><strong>Status:<\/strong> public proof-of-concept exists and needs only standard Python sockets. Exploitation reported in the wild.<\/li>\n<li><strong>Age:<\/strong> introduced 2008, disclosed 2026. Eighteen years of exposure.<\/li>\n<li><strong>Config-gated:<\/strong> yes, and <code>nginx -t<\/code> will <em>not<\/em> warn you. See below.<\/li>\n<li><strong>Fix now:<\/strong> do not stop at 1.30.1. Go to <strong>1.30.4<\/strong> or <strong>1.31.3<\/strong>.<\/li>\n<\/ul>\n<h2 id=\"what-is-nginx-rift\">What is NGINX Rift?<\/h2>\n<p>NGINX evaluates complex string expressions &#8211; the things you build with variables, captures and literals &#8211; in two passes. The first pass, LEN, walks the expression and measures how many bytes the result will need, so NGINX can allocate a buffer of exactly that size. The second pass, VALUE, walks the same expression again and writes the bytes into that buffer. The correctness of the whole scheme rests on one assumption: that both passes see the same data and therefore agree on the size.<\/p>\n<p>CVE-2026-42945 breaks that assumption inside <code>src\/http\/ngx_http_script.c<\/code>. An <code>is_args<\/code> state flag, set during the length-calculation pass, leaks into the copy pass. When a rewrite replacement combines an unnamed PCRE capture with a question mark, <code>ngx_escape_uri<\/code> ends up writing more bytes than the LEN pass budgeted for. The result is a classic heap buffer overflow: the copy runs off the end of an allocation that was correctly sized for a different answer.<\/p>\n<p>The reason this matters more than a typical overflow is the position NGINX occupies. It is not an application dependency buried three layers deep; it is the process that terminates connections at the edge, in front of more than a third of the web. A bug reachable from a single unauthenticated GET, in a module as ordinary as <code>rewrite<\/code>, is about as broadly exposed as software gets. Researchers demonstrated the crash against a current Ubuntu build with modern mitigations enabled, using nothing but standard Python sockets, 349 padding bytes and 2,000 URI-escapable characters to produce a deterministic 4,000-byte overflow.<\/p>\n<p>Worth noting for triage: this is the <em>same underlying defect class<\/em> as <a href=\"\/wordpress\/cve-2026-42533-nginx-map-heap-overflow-detection-with-sn1per\/\">CVE-2026-42533<\/a>, the map directive overflow disclosed two months later. Same file, same two-pass contract violation, different directive as the entry point. If you are patching for one, read the section on version windows below before you pick a target release, because the two were fixed in different builds and the obvious upgrade closes only one of them.<\/p>\n<h2 id=\"affected-versions\">Affected and fixed versions<\/h2>\n<p>The version picture for NGINX Rift on its own is refreshingly simple. One contiguous window, one upper bound.<\/p>\n<table>\n<thead>\n<tr>\n<th>Branch<\/th>\n<th>Affected<\/th>\n<th>Fixed<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Stable 1.30.x<\/strong><\/td>\n<td>1.30.0<\/td>\n<td>1.30.1<\/td>\n<\/tr>\n<tr>\n<td><strong>Mainline 1.31.x<\/strong><\/td>\n<td>none (branched after the fix)<\/td>\n<td>1.31.0 and later<\/td>\n<\/tr>\n<tr>\n<td><strong>Everything older<\/strong><\/td>\n<td>0.6.27 through 1.29.x<\/td>\n<td>Upgrade<\/td>\n<\/tr>\n<tr>\n<td><strong>Legacy 0.6.27 &#8211; 0.9.7<\/strong><\/td>\n<td>All<\/td>\n<td><strong>No patch planned. Migrate.<\/strong><\/td>\n<\/tr>\n<tr>\n<td><strong>NGINX Plus<\/strong><\/td>\n<td>R32 through R36<\/td>\n<td>R37, R36 P4, or R32 P6<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>Here is the trap, and it is an expensive one.<\/strong> The obvious response to this advisory is to upgrade to 1.30.1, because 1.30.1 is what the NGINX Rift advisory tells you to install. That is correct for this CVE and wrong for your server. On July 15, 2026, F5 shipped three more memory-corruption fixes: CVE-2026-42533 (the map directive overflow, with a weaponized public exploit), CVE-2026-60005 (uninitialised memory disclosure in the slice module) and CVE-2026-56434 (use-after-free in the SSI module). Those landed in <strong>1.30.4<\/strong> and <strong>1.31.3<\/strong>. An operator who read the May advisory, upgraded to 1.30.1, and considered the matter closed is sitting three releases behind on a bug with public ASLR-defeating exploit code.<\/p>\n<p>So the correct target is not 1.30.1. It is <strong>1.30.4 on stable or 1.31.3 on mainline<\/strong>, which closes all four in one change. If you take one action from this page, make it that.<\/p>\n<h2 id=\"config-gated\">Why version alone cannot clear a host<\/h2>\n<p>NGINX Rift is <strong>config-gated<\/strong>. An unpatched build is only actually exploitable when the configuration contains a specific directive pattern, and an attacker cannot create that pattern remotely. The vulnerable shape needs three ingredients together:<\/p>\n<ul>\n<li>a <code>rewrite<\/code> directive, followed by a <code>rewrite<\/code>, <code>if<\/code> or <code>set<\/code> directive,<\/li>\n<li>an <strong>unnamed<\/strong> PCRE capture group such as <code>$1<\/code> or <code>$2<\/code>,<\/li>\n<li>and a <strong>question mark<\/strong> in the replacement string.<\/li>\n<\/ul>\n<p>That last combination is not exotic. Any rewrite that maps a path segment into a query string produces it &#8211; <code>rewrite ^\/old\/(.*)$ \/new?path=$1 last;<\/code> is the canonical example, and variants of it ship in vendor and framework configuration templates all over the internet.<\/p>\n<p><strong>The operationally important part: <code>nginx -t<\/code> does not flag this pattern.<\/strong> The configuration is syntactically valid, so the standard config test passes clean and nothing warns the operator. There is no deprecation notice, no lint failure, no startup message. If you have been relying on <code>nginx -t<\/code> as your configuration safety net, it has nothing to say about this bug.<\/p>\n<p>The practical consequence for scanning is that a version match is a <em>patch-gap finding<\/em>, not a proven exploitable RCE. Two further things break the inference from banner to exploitability, and both are common. Distributions backport security fixes without bumping the upstream version string, so a banner inside the vulnerable range may already be patched. And the banner you read at the edge may belong to a CDN or reverse proxy rather than the origin you think you are testing. We build for both facts below: a remote template that finds the gap, and a local template that decides whether the gap is reachable.<\/p>\n<h2 id=\"am-i-affected\">Am I affected? Quick manual checks<\/h2>\n<p>The authoritative check is local and takes one command:<\/p>\n<pre><code># On the server:\nnginx -v\n\n# nginx version: nginx\/1.29.2   -&gt; affected\n# nginx version: nginx\/1.30.1   -&gt; fixed for Rift, still exposed to CVE-2026-42533\n# nginx version: nginx\/1.30.4   -&gt; fixed for all four 2026 memory-corruption CVEs<\/code><\/pre>\n<p>Remotely and unauthenticated, the Server response header is the usual signal, with the footer of NGINX&#8217;s own default error pages as a fallback when the header has been trimmed:<\/p>\n<pre><code>curl -sI https:\/\/target.example.com | grep -i '^server:'\n\n# Fallback - NGINX prints its version in its own 404 page footer:\ncurl -s https:\/\/target.example.com\/does-not-exist-12345 | grep -i 'center&gt;nginx'<\/code><\/pre>\n<p>Then check whether the configuration actually reaches the bug:<\/p>\n<pre><code># Does any rewrite combine a capture with a question mark?\ngrep -rnE 'rewrite\\s+\\S+\\s+[^;]*(\\$[1-9][^;]*\\?|\\?[^;]*\\$[1-9])' \/etc\/nginx\/<\/code><\/pre>\n<p>Be clear-eyed about what these can and cannot tell you. <strong>Absence of a version banner is not evidence of patching.<\/strong> <code>server_tokens off<\/code> removes the version entirely, and plenty of deployments strip or rewrite the Server header at the edge. A host that discloses nothing is <em>unknown<\/em>, not clean. And a clean <code>grep<\/code> today is not a permanent clearance, because any config change or vendor template can introduce the pattern tomorrow. Patch the binary regardless of what the configuration audit says.<\/p>\n<h2 id=\"nuclei-template\">CVE-2026-42945 Nuclei detection template<\/h2>\n<p>Below is the full template. It is <strong>non-destructive<\/strong>: it sends one ordinary GET, reads the version NGINX advertises about itself, and compares it against the fixed builds. It sends no crafted URI, no padding, and never reaches the vulnerable code path. It is safe to run against production.<\/p>\n<p>We want to be direct about why it is a version check rather than an active probe. Confirming this bug actively means overflowing a worker heap. That crashes the worker, which <em>is<\/em> the denial of service the CVE describes. There is no safe active confirmation, so anyone shipping one is shipping an exploit. Do not run one against an asset you do not own, and do not run one against a bug bounty target at all.<\/p>\n<pre><code>id: CVE-2026-42945\n\ninfo:\n  name: NGINX Rift - rewrite Module Heap Buffer Overflow (CVE-2026-42945)\n  author: xer0dayz\n  severity: critical\n  description: |\n    Heap-based buffer overflow (CWE-122) in ngx_http_rewrite_module. An is_args\n    state flag set during the length-calculation pass leaks into the copy pass,\n    so ngx_escape_uri writes past the allocated buffer when a rewrite replacement\n    combines an unnamed PCRE capture with a question mark.\n\n    NON-DESTRUCTIVE and PASSIVE. One ordinary GET, version comparison only. Sends\n    no crafted URI and never reaches the vulnerable code path.\n\n    Treat a hit as a patch-gap finding, NOT a proven exploitable RCE. Exploitation\n    is config-gated and nginx -t does NOT flag the vulnerable pattern.\n  classification:\n    cvss-metrics: CVSS:3.1\/AV:N\/AC:H\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\n    cvss-score: 8.1\n    cve-id: CVE-2026-42945\n    cwe-id: CWE-122\n  metadata:\n    verified: false\n    max-request: 2\n    vendor: f5\n    product: nginx\n    patched-versions: \"1.30.1, 1.31.0\"\n    exploited-in-the-wild: true\n  tags: cve,cve2026,nginx,f5,nginx-rift,overflow,rce,patch-gap,passive\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}\"\n      - \"{{BaseURL}}\/{{randstr}}\"\n\n    stop-at-first-match: true\n    redirects: false\n\n    # One contiguous vulnerable window. Stable is fixed from 1.30.1 and mainline\n    # from 1.31.0, so every build above 1.30.0 is patched and a single upper bound\n    # is correct here - unlike CVE-2026-42533, which needs two windows.\n    matchers:\n      - type: dsl\n        name: nginx-0.6.27-to-1.30.0\n        dsl:\n          - \"version != '' &amp;&amp; compare_versions(version, '&gt;= 0.6.27', '&lt; 1.30.1')\"\n\n    extractors:\n      # Server header first, then the version NGINX prints in the footer of its\n      # own default error pages. Anchoring the body form to &lt;center&gt; avoids\n      # matching proxied application content that merely mentions an nginx version.\n      - type: regex\n        name: version\n        part: response\n        group: 1\n        internal: true\n        regex:\n          - '(?:[Ss]erver:\\s*nginx\/|&lt;center&gt;nginx\/)([0-9]+\\.[0-9]+\\.[0-9]+)'\n\n      - type: regex\n        name: nginx_version\n        part: response\n        group: 1\n        regex:\n          - '(?:[Ss]erver:\\s*nginx\/|&lt;center&gt;nginx\/)([0-9]+\\.[0-9]+\\.[0-9]+)'<\/code><\/pre>\n<p>Save it and run it:<\/p>\n<pre><code>nuclei -t CVE-2026-42945.yaml -l targets.txt<\/code><\/pre>\n<p>We verified the version window against a twelve-version mock matrix covering every boundary, including 1.30.0 (last affected), 1.30.1 (first fixed) and the 1.31.x mainline. All twelve boundary cases pass.<\/p>\n<h2 id=\"config-audit\">The second template: auditing the configuration<\/h2>\n<p>Version detection finds the patch gap. It cannot tell you whether the gap is reachable, and as established above, that depends entirely on the configuration. So we ship a second, file-protocol template that reads the config tree and looks for the vulnerable directive pattern directly.<\/p>\n<p>Here is the matcher that covers NGINX Rift. The full file also carries a matcher for the map directive pattern behind <a href=\"\/wordpress\/cve-2026-42533-nginx-map-heap-overflow-detection-with-sn1per\/\">CVE-2026-42533<\/a>, which we walk through in that advisory:<\/p>\n<pre><code>file:\n  - extensions:\n      - all\n\n    matchers:\n      # The \\S+ consumes the match pattern so that a '?' used as a PCRE quantifier\n      # in the pattern itself is not mistaken for a '?' in the replacement. Both\n      # orderings are covered: capture-then-question-mark (\/new\/$1?x=1) and\n      # question-mark-then-capture (\/new?path=$1).\n      - type: regex\n        name: cve-2026-42945-rewrite-capture-with-querystring\n        regex:\n          - '(?im)^\\s*rewrite\\s+\\S+\\s+[^;\\n]*(?:\\$[1-9][^;\\n]*\\?|\\?[^;\\n]*\\$[1-9])'<\/code><\/pre>\n<p>Two things to know before you run it. <strong>The <code>-file<\/code> flag is required<\/strong> &#8211; Nuclei disables file-protocol templates by default and will otherwise exit with &#8220;no templates provided for scan&#8221;, which looks exactly like a clean result if you are not reading closely. And point it at the whole config tree rather than <code>nginx.conf<\/code> alone, because on Debian and Ubuntu the rewrite rules usually live in extensionless files under <code>sites-enabled\/<\/code>:<\/p>\n<pre><code>nuclei -file -t nginx-script-engine-config-audit.yaml -target \/etc\/nginx\/<\/code><\/pre>\n<p>The <code>\\S+<\/code> in that regex is doing real work. Without it, a perfectly safe rule like <code>rewrite ^\/docs(\/v2)?\/(.*)$ \/help\/$2 last;<\/code> produces a false positive, because the <code>?<\/code> is a PCRE quantifier in the match pattern rather than a literal in the replacement. Consuming the pattern token first removes that entire class of noise.<\/p>\n<p>Treat a hit as &#8220;review this by hand.&#8221; NGINX evaluation order is a runtime property spanning includes, server blocks and location blocks, and no regex can prove reachability. Equally, treat a clean result as provisional: split configurations can put the ingredients in separate files, and a clean audit is never a reason to leave an unpatched binary running.<\/p>\n<h2 id=\"sn1per\">Finding unpatched NGINX across your attack surface with Sn1per<\/h2>\n<p>One template against one host answers one question. The harder problem is the NGINX instance nobody remembers deploying: the staging box behind a forgotten DNS record, the appliance that embeds NGINX as a component, the ingress controller in a cluster somebody stood up for a demo in 2023. Those are the hosts that stay on 1.29.x indefinitely, because nothing in the patch process knows they exist.<\/p>\n<p>That is an attack surface discovery problem, not a scanning problem, and it is what <a href=\"\/wordpress\/sn1per-professional-2026\/\">Sn1per<\/a> is built for. The workflow is discovery first, detection second:<\/p>\n<pre><code># Discover the surface, then sweep it\nsniper -t example.com -m recon\nsniper -t example.com -m web<\/code><\/pre>\n<p>Both templates from this advisory ship in Sn1per&#8217;s curated set, so hosts running affected NGINX are flagged automatically as the surface is enumerated. Because the check is passive, it runs safely against production during normal scheduled scans &#8211; no worker crashes, no restart loops, no incident.<\/p>\n<p>The practical shape of the result is a list of every NGINX version across the estate rather than a single yes-or-no. That is the artifact that actually drives remediation, because it tells you how many hosts are on 1.30.1 and think they are done.<\/p>\n<h2 id=\"editions\">Which Sn1per edition fits<\/h2>\n<ul>\n<li><strong>Sn1per Community Edition<\/strong> &#8211; free and open source. Run the templates by hand across targets you already know about. Good for validating a handful of hosts.<\/li>\n<li><strong><a href=\"\/wordpress\/sn1per-professional-2026\/\">Sn1per Professional 2026<\/a><\/strong> &#8211; adds the web UI, scheduled scans and reporting. This is the tier that turns a one-off check into continuous coverage, which is what you want for a CVE class where the vulnerable population keeps being rediscovered.<\/li>\n<li><strong>Sn1per Enterprise<\/strong> &#8211; multi-workspace attack surface management with continuous monitoring and alerting. Built for estates where &#8220;how many NGINX instances do we run&#8221; is a genuinely hard question.<\/li>\n<\/ul>\n<h2 id=\"remediation\">Remediation and mitigation<\/h2>\n<ol>\n<li><strong>Upgrade, and pick the right target.<\/strong> Not 1.30.1. Go to <strong>1.30.4<\/strong> (stable) or <strong>1.31.3<\/strong> (mainline), which closes CVE-2026-42945, CVE-2026-42533, CVE-2026-60005 and CVE-2026-56434 together. NGINX Plus users want R37 or the relevant patch level.<\/li>\n<li><strong>Patch the downstream products too.<\/strong> NGINX Ingress Controller, NGINX Gateway Fabric, NGINX App Protect WAF and NGINX Instance Manager all ship the same script engine and need their own patched builds.<\/li>\n<li><strong>Interim mitigation only, if you genuinely cannot patch:<\/strong> replace unnamed regex captures with named captures in rewrite replacements, or remove the question mark from any replacement that also references a capture. This is mitigation, not remediation.<\/li>\n<li><strong>Legacy builds have no path.<\/strong> Versions 0.6.27 through 0.9.7 will not receive a patch. Migration to a supported branch is the only option.<\/li>\n<li><strong>Re-audit after config changes.<\/strong> Vendor and framework configuration templates routinely ship rewrite rules with query-string replacements, so the pattern can be reintroduced by a change that has nothing to do with security.<\/li>\n<\/ol>\n<h2 id=\"faq\">Frequently asked questions<\/h2>\n<p><strong>Is CVE-2026-42945 remote code execution or just denial of service?<\/strong><br \/>\nBoth, depending on the target. The reliable, immediate impact is a worker-process crash or restart loop from a single unauthenticated request. Code execution is reachable where ASLR is disabled or can be bypassed. F5&#8217;s advisory frames the impact conservatively as denial of service with possible code execution; treat it as RCE-capable for risk purposes, because public exploit code exists and exploitation has been reported in the wild.<\/p>\n<p><strong>My server runs nginx 1.30.1. Am I safe?<\/strong><br \/>\nSafe from NGINX Rift, not safe overall. 1.30.1 fixes CVE-2026-42945 but predates the July 15 release that fixed CVE-2026-42533, CVE-2026-60005 and CVE-2026-56434. CVE-2026-42533 has weaponized public exploit code that defeats ASLR. Upgrade to 1.30.4.<\/p>\n<p><strong>Will <code>nginx -t<\/code> tell me if my config is vulnerable?<\/strong><br \/>\nNo. The vulnerable pattern is syntactically valid, so <code>nginx -t<\/code> passes clean and emits no warning. This is why the configuration audit template exists.<\/p>\n<p><strong>Can I confirm the vulnerability by sending a test request?<\/strong><br \/>\nNot safely. Confirming it means overflowing a worker heap, which crashes the worker &#8211; that is the denial of service the CVE describes. Use version detection plus a configuration audit instead. Never attempt active confirmation against a bug bounty target or any asset you do not own.<\/p>\n<p><strong>My scanner found nothing. Does that mean I am patched?<\/strong><br \/>\nNo. <code>server_tokens off<\/code> removes the version banner entirely, and many deployments strip or rewrite the Server header at the CDN or load balancer. A host that discloses no version is unknown, not clean. Confirm locally with <code>nginx -v<\/code>.<\/p>\n<p><script type=\"application\/ld+json\">\n{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[\n{\"@type\":\"Question\",\"name\":\"Is CVE-2026-42945 remote code execution or just denial of service?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Both, depending on the target. The reliable, immediate impact is a worker-process crash or restart loop from a single unauthenticated request. Code execution is reachable where ASLR is disabled or can be bypassed. Public exploit code exists and exploitation has been reported in the wild, so treat it as RCE-capable for risk purposes.\"}},\n{\"@type\":\"Question\",\"name\":\"My server runs nginx 1.30.1. Am I safe from CVE-2026-42945?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Safe from NGINX Rift, but not safe overall. Version 1.30.1 fixes CVE-2026-42945 but predates the July 15, 2026 release that fixed CVE-2026-42533, CVE-2026-60005 and CVE-2026-56434. CVE-2026-42533 has weaponized public exploit code. Upgrade to 1.30.4 on stable or 1.31.3 on mainline.\"}},\n{\"@type\":\"Question\",\"name\":\"Will nginx -t tell me if my configuration is vulnerable to NGINX Rift?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. The vulnerable pattern - a rewrite replacement combining an unnamed PCRE capture with a question mark - is syntactically valid, so nginx -t passes clean and emits no warning at all. A dedicated configuration audit is required.\"}},\n{\"@type\":\"Question\",\"name\":\"Can I confirm CVE-2026-42945 by sending a test request?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Not safely. Confirming the bug means overflowing a worker heap, which crashes the worker process and constitutes the denial of service the CVE describes. Use passive version detection combined with a configuration audit instead. Never attempt active confirmation against a bug bounty target or any asset you do not own.\"}},\n{\"@type\":\"Question\",\"name\":\"My scanner found no NGINX version. Does that mean I am patched?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. The server_tokens off directive removes the version banner entirely, and many deployments strip or rewrite the Server header at a CDN or load balancer. A host that discloses no version should be treated as unknown rather than clean. Confirm locally with nginx -v.\"}}\n]}\n<\/script><\/p>\n<div id=\"wp-share-button-65603\" class=\"wp-share-button theme28\"><span class=\"total-share \"><i class=\"total-count-text\">Total Share<\/i> <i class=\"total-count\">0<\/i> <\/span><a target=\"_blank\" href=\"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/\" class=\"share-button share-button-65603 facebook\" id=\"facebook\" data-nonce=\"e761e46fe6\">\r\n\r\n<span class=\"button-icon\"><\/span>\r\n<span class=\"button-name\">Facebook<\/span>\r\n\r\n<span class=\"button-count\">0<\/span>\r\n\r\n<\/a>\r\n\r\n<a target=\"_blank\" href=\"https:\/\/twitter.com\/intent\/tweet?url=https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/&amp;text=CVE-2026-42945%20(NGINX%20Rift):%20Heap%20Buffer%20Overflow%20in%20the%20Rewrite%20Module%20\u2013%20Advisory%20+%20Nuclei%20Detection\" class=\"share-button share-button-65603 twitter\" id=\"twitter\" data-nonce=\"e761e46fe6\">\r\n\r\n<span class=\"button-icon\"><\/span>\r\n<span class=\"button-name\">Twitter<\/span>\r\n\r\n<span class=\"button-count\">0<\/span>\r\n\r\n<\/a>\r\n\r\n<a target=\"_blank\" href=\"http:\/\/www.reddit.com\/submit?title=CVE-2026-42945%20(NGINX%20Rift):%20Heap%20Buffer%20Overflow%20in%20the%20Rewrite%20Module%20\u2013%20Advisory%20+%20Nuclei%20Detection&amp;url=https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/\" class=\"share-button share-button-65603 reddit\" id=\"reddit\" data-nonce=\"e761e46fe6\">\r\n\r\n<span class=\"button-icon\"><\/span>\r\n<span class=\"button-name\">Reddit<\/span>\r\n\r\n<span class=\"button-count\">0<\/span>\r\n\r\n<\/a>\r\n\r\n<a target=\"_blank\" href=\"https:\/\/www.linkedin.com\/shareArticle?url=https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/&amp;title=CVE-2026-42945%20(NGINX%20Rift):%20Heap%20Buffer%20Overflow%20in%20the%20Rewrite%20Module%20\u2013%20Advisory%20+%20Nuclei%20Detection&amp;summary=&amp;source=\" class=\"share-button share-button-65603 linkedin\" id=\"linkedin\" data-nonce=\"e761e46fe6\">\r\n\r\n<span class=\"button-icon\"><\/span>\r\n<span class=\"button-name\">Linkedin<\/span>\r\n\r\n<span class=\"button-count\">0<\/span>\r\n\r\n<\/a>\r\n\r\n<a title=\"More...\" href=\"#wp-share-button-65603\" class=\"share-button-more\"><span class=\"button-icon\"><i class=\"fa fa-plus\"><\/i><\/span><\/a><div class=\"wp-share-button-popup wp-share-button-popup-65603\"><div class=\"popup-buttons\"><span class=\"close\">X<\/span><a target=\"_blank\" href=\"mailto:?subject=CVE-2026-42945%20(NGINX%20Rift):%20Heap%20Buffer%20Overflow%20in%20the%20Rewrite%20Module%20\u2013%20Advisory%20+%20Nuclei%20Detection&amp;body=https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/\" class=\"share-button share-button-65603 email\" id=\"email\">\r\n\r\n<span class=\"button-icon\"><\/span>\r\n<span class=\"button-name\">Email<\/span>\r\n<span class=\"button-count\">0<\/span>\t\t\t\t\r\n\r\n<\/a>\r\n<\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>CVE-2026-42945, known as NGINX Rift, is a critical heap buffer overflow in ngx_http_rewrite_module reachable from a single unauthenticated request, with exploitation reported in the wild. A plain-English advisory, a tested non-destructive Nuclei detection template, a configuration audit template for the pattern nginx -t will not warn you about, and why upgrading to 1.30.1 leaves you exposed.<\/p>\n","protected":false},"author":1,"featured_media":65604,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[290,80,99,184,289,338,335],"tags":[359,463,467,468,464,466,465,470,437,37,366,436,469],"class_list":["post-65603","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-attack-surface-management","category-bug-bounties","category-cves","category-news","category-penetration-testing","category-threat-intelligence","category-vulnerability-scanning","tag-359","tag-cve-2026-42945","tag-heap-buffer-overflow","tag-memory-corruption","tag-nginx-rift","tag-nginx-security","tag-nginx-vulnerability","tag-ngx-http-rewrite-module","tag-nuclei-template","tag-sn1per","tag-sn1per-pro","tag-unauthenticated-rce","tag-web-server-security"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"CVE-2026-42945 (NGINX Rift): critical heap overflow in the nginx rewrite module, exploited in the wild. Get the Nuclei detection template and scan with Sn1per.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"xer0dayz\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Sn1perSecurity\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"CVE-2026-42945 NGINX Rift: Detection + Nuclei Template | Sn1per\" \/>\n\t\t<meta property=\"og:description\" content=\"CVE-2026-42945 (NGINX Rift): critical heap overflow in the nginx rewrite module, exploited in the wild. Get the Nuclei detection template and scan with Sn1per.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/08\/cve-2026-42945-nginx-rift.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/08\/cve-2026-42945-nginx-rift.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-08-03T17:08:55+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-08-03T17:08:55+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Sn1persecurity-105784611869093\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@sn1persecurity\" \/>\n\t\t<meta name=\"twitter:title\" content=\"CVE-2026-42945 NGINX Rift: Detection + Nuclei Template | Sn1per\" \/>\n\t\t<meta name=\"twitter:description\" content=\"CVE-2026-42945 (NGINX Rift): critical heap overflow in the nginx rewrite module, exploited in the wild. Get the Nuclei detection template and scan with Sn1per.\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@sn1persecurity\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/08\/cve-2026-42945-nginx-rift.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/#blogposting\",\"name\":\"CVE-2026-42945 NGINX Rift: Detection + Nuclei Template | Sn1per\",\"headline\":\"CVE-2026-42945 (NGINX Rift): Heap Buffer Overflow in the Rewrite Module &#8211; Advisory + Nuclei Detection\",\"author\":{\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/author\\\/xer0dayz\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/cve-2026-42945-nginx-rift.png\",\"width\":1200,\"height\":630,\"caption\":\"Sn1perSecurity advisory cover: CVE-2026-42945 NGINX Rift heap buffer overflow in the rewrite module, with a non-destructive Nuclei detection template and Sn1per attack surface detection\"},\"datePublished\":\"2026-08-03T10:08:55-07:00\",\"dateModified\":\"2026-08-03T10:08:55-07:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/#webpage\"},\"articleSection\":\"Attack Surface Management, Bug Bounties, CVE's, News, Penetration Testing, Threat Intelligence, Vulnerability Scanning, 2026, cve-2026-42945, heap-buffer-overflow, memory-corruption, nginx-rift, nginx-security, nginx-vulnerability, ngx-http-rewrite-module, nuclei-template, sn1per, sn1per pro, unauthenticated-rce, web-server-security\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/category\\\/bug-bounties\\\/#listItem\",\"name\":\"Bug Bounties\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/category\\\/bug-bounties\\\/#listItem\",\"position\":2,\"name\":\"Bug Bounties\",\"item\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/category\\\/bug-bounties\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/#listItem\",\"name\":\"CVE-2026-42945 (NGINX Rift): Heap Buffer Overflow in the Rewrite Module &#8211; Advisory + Nuclei Detection\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/#listItem\",\"position\":3,\"name\":\"CVE-2026-42945 (NGINX Rift): Heap Buffer Overflow in the Rewrite Module &#8211; Advisory + Nuclei Detection\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/category\\\/bug-bounties\\\/#listItem\",\"name\":\"Bug Bounties\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/#organization\",\"name\":\"Sn1perSecurity\",\"description\":\"Get an attacker's view of your organization with our all-in-one offensive security platform\",\"url\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/\",\"email\":\"support@sn1persecurity.com\",\"foundingDate\":\"2021-10-05\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"value\":2},\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2022\\\/06\\\/Sn1perwhiteandcircleicontwitter.jpg\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/#organizationLogo\",\"width\":500,\"height\":500,\"caption\":\"Sn1perSecurity Logo\"},\"image\":{\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/Sn1persecurity-105784611869093\",\"https:\\\/\\\/x.com\\\/sn1persecurity\",\"https:\\\/\\\/www.instagram.com\\\/sn1persecurity\",\"https:\\\/\\\/www.youtube.com\\\/sn1persecurity\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/sn1persecurity\\\/\",\"https:\\\/\\\/github.com\\\/1N3\\\/Sn1per\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/author\\\/xer0dayz\\\/#author\",\"url\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/author\\\/xer0dayz\\\/\",\"name\":\"xer0dayz\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e5f1a4e7b520f257ee62dcb2a44274bc57e37aa9fe3e3dcd511755464f80f636?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"xer0dayz\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/#webpage\",\"url\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/\",\"name\":\"CVE-2026-42945 NGINX Rift: Detection + Nuclei Template | Sn1per\",\"description\":\"CVE-2026-42945 (NGINX Rift): critical heap overflow in the nginx rewrite module, exploited in the wild. Get the Nuclei detection template and scan with Sn1per.\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/author\\\/xer0dayz\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/author\\\/xer0dayz\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/cve-2026-42945-nginx-rift.png\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/#mainImage\",\"width\":1200,\"height\":630,\"caption\":\"Sn1perSecurity advisory cover: CVE-2026-42945 NGINX Rift heap buffer overflow in the rewrite module, with a non-destructive Nuclei detection template and Sn1per attack surface detection\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\\\/#mainImage\"},\"datePublished\":\"2026-08-03T10:08:55-07:00\",\"dateModified\":\"2026-08-03T10:08:55-07:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/#website\",\"url\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/\",\"name\":\"Sn1perSecurity\",\"alternateName\":\"Sn1per\",\"description\":\"Get an attacker's view of your organization with our all-in-one offensive security platform\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/sn1persecurity.com\\\/wordpress\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"CVE-2026-42945 NGINX Rift: Detection + Nuclei Template | Sn1per","description":"CVE-2026-42945 (NGINX Rift): critical heap overflow in the nginx rewrite module, exploited in the wild. Get the Nuclei detection template and scan with Sn1per.","canonical_url":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/#blogposting","name":"CVE-2026-42945 NGINX Rift: Detection + Nuclei Template | Sn1per","headline":"CVE-2026-42945 (NGINX Rift): Heap Buffer Overflow in the Rewrite Module &#8211; Advisory + Nuclei Detection","author":{"@id":"https:\/\/sn1persecurity.com\/wordpress\/author\/xer0dayz\/#author"},"publisher":{"@id":"https:\/\/sn1persecurity.com\/wordpress\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/08\/cve-2026-42945-nginx-rift.png","width":1200,"height":630,"caption":"Sn1perSecurity advisory cover: CVE-2026-42945 NGINX Rift heap buffer overflow in the rewrite module, with a non-destructive Nuclei detection template and Sn1per attack surface detection"},"datePublished":"2026-08-03T10:08:55-07:00","dateModified":"2026-08-03T10:08:55-07:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/#webpage"},"isPartOf":{"@id":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/#webpage"},"articleSection":"Attack Surface Management, Bug Bounties, CVE's, News, Penetration Testing, Threat Intelligence, Vulnerability Scanning, 2026, cve-2026-42945, heap-buffer-overflow, memory-corruption, nginx-rift, nginx-security, nginx-vulnerability, ngx-http-rewrite-module, nuclei-template, sn1per, sn1per pro, unauthenticated-rce, web-server-security"},{"@type":"BreadcrumbList","@id":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/sn1persecurity.com\/wordpress#listItem","position":1,"name":"Home","item":"https:\/\/sn1persecurity.com\/wordpress","nextItem":{"@type":"ListItem","@id":"https:\/\/sn1persecurity.com\/wordpress\/category\/bug-bounties\/#listItem","name":"Bug Bounties"}},{"@type":"ListItem","@id":"https:\/\/sn1persecurity.com\/wordpress\/category\/bug-bounties\/#listItem","position":2,"name":"Bug Bounties","item":"https:\/\/sn1persecurity.com\/wordpress\/category\/bug-bounties\/","nextItem":{"@type":"ListItem","@id":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/#listItem","name":"CVE-2026-42945 (NGINX Rift): Heap Buffer Overflow in the Rewrite Module &#8211; Advisory + Nuclei Detection"},"previousItem":{"@type":"ListItem","@id":"https:\/\/sn1persecurity.com\/wordpress#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/#listItem","position":3,"name":"CVE-2026-42945 (NGINX Rift): Heap Buffer Overflow in the Rewrite Module &#8211; Advisory + Nuclei Detection","previousItem":{"@type":"ListItem","@id":"https:\/\/sn1persecurity.com\/wordpress\/category\/bug-bounties\/#listItem","name":"Bug Bounties"}}]},{"@type":"Organization","@id":"https:\/\/sn1persecurity.com\/wordpress\/#organization","name":"Sn1perSecurity","description":"Get an attacker's view of your organization with our all-in-one offensive security platform","url":"https:\/\/sn1persecurity.com\/wordpress\/","email":"support@sn1persecurity.com","foundingDate":"2021-10-05","numberOfEmployees":{"@type":"QuantitativeValue","value":2},"logo":{"@type":"ImageObject","url":"https:\/\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/06\/Sn1perwhiteandcircleicontwitter.jpg","@id":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/#organizationLogo","width":500,"height":500,"caption":"Sn1perSecurity Logo"},"image":{"@id":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/#organizationLogo"},"sameAs":["https:\/\/www.facebook.com\/Sn1persecurity-105784611869093","https:\/\/x.com\/sn1persecurity","https:\/\/www.instagram.com\/sn1persecurity","https:\/\/www.youtube.com\/sn1persecurity","https:\/\/www.linkedin.com\/in\/sn1persecurity\/","https:\/\/github.com\/1N3\/Sn1per"]},{"@type":"Person","@id":"https:\/\/sn1persecurity.com\/wordpress\/author\/xer0dayz\/#author","url":"https:\/\/sn1persecurity.com\/wordpress\/author\/xer0dayz\/","name":"xer0dayz","image":{"@type":"ImageObject","@id":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/e5f1a4e7b520f257ee62dcb2a44274bc57e37aa9fe3e3dcd511755464f80f636?s=96&d=mm&r=g","width":96,"height":96,"caption":"xer0dayz"}},{"@type":"WebPage","@id":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/#webpage","url":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/","name":"CVE-2026-42945 NGINX Rift: Detection + Nuclei Template | Sn1per","description":"CVE-2026-42945 (NGINX Rift): critical heap overflow in the nginx rewrite module, exploited in the wild. Get the Nuclei detection template and scan with Sn1per.","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/sn1persecurity.com\/wordpress\/#website"},"breadcrumb":{"@id":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/#breadcrumblist"},"author":{"@id":"https:\/\/sn1persecurity.com\/wordpress\/author\/xer0dayz\/#author"},"creator":{"@id":"https:\/\/sn1persecurity.com\/wordpress\/author\/xer0dayz\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/08\/cve-2026-42945-nginx-rift.png","@id":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/#mainImage","width":1200,"height":630,"caption":"Sn1perSecurity advisory cover: CVE-2026-42945 NGINX Rift heap buffer overflow in the rewrite module, with a non-destructive Nuclei detection template and Sn1per attack surface detection"},"primaryImageOfPage":{"@id":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/#mainImage"},"datePublished":"2026-08-03T10:08:55-07:00","dateModified":"2026-08-03T10:08:55-07:00"},{"@type":"WebSite","@id":"https:\/\/sn1persecurity.com\/wordpress\/#website","url":"https:\/\/sn1persecurity.com\/wordpress\/","name":"Sn1perSecurity","alternateName":"Sn1per","description":"Get an attacker's view of your organization with our all-in-one offensive security platform","inLanguage":"en-US","publisher":{"@id":"https:\/\/sn1persecurity.com\/wordpress\/#organization"}}]},"og:locale":"en_US","og:site_name":"Sn1perSecurity","og:type":"article","og:title":"CVE-2026-42945 NGINX Rift: Detection + Nuclei Template | Sn1per","og:description":"CVE-2026-42945 (NGINX Rift): critical heap overflow in the nginx rewrite module, exploited in the wild. Get the Nuclei detection template and scan with Sn1per.","og:url":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/","og:image":"https:\/\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/08\/cve-2026-42945-nginx-rift.png","og:image:secure_url":"https:\/\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/08\/cve-2026-42945-nginx-rift.png","og:image:width":"1200","og:image:height":"630","article:published_time":"2026-08-03T17:08:55+00:00","article:modified_time":"2026-08-03T17:08:55+00:00","article:publisher":"https:\/\/www.facebook.com\/Sn1persecurity-105784611869093","twitter:card":"summary_large_image","twitter:site":"@sn1persecurity","twitter:title":"CVE-2026-42945 NGINX Rift: Detection + Nuclei Template | Sn1per","twitter:description":"CVE-2026-42945 (NGINX Rift): critical heap overflow in the nginx rewrite module, exploited in the wild. Get the Nuclei detection template and scan with Sn1per.","twitter:creator":"@sn1persecurity","twitter:image":"https:\/\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/08\/cve-2026-42945-nginx-rift.png"},"aioseo_meta_data":{"post_id":"65603","title":"CVE-2026-42945 NGINX Rift: Detection + Nuclei Template | Sn1per","description":"CVE-2026-42945 (NGINX Rift): critical heap overflow in the nginx rewrite module, exploited in the wild. Get the Nuclei detection template and scan with Sn1per.","keywords":null,"keyphrases":{"focus":{"keyphrase":"CVE-2026-42945","score":0,"analysis":[]}},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"featured","og_image_url":"https:\/\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/08\/cve-2026-42945-nginx-rift.png","og_image_width":"1200","og_image_height":"630","og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":true,"twitter_card":"summary_large_image","twitter_image_type":"featured","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":true,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2026-08-03 17:08:57","updated":"2026-08-03 18:26:26","seo_analyzer_scan_date":null,"focus_keyword":"CVE-2026-42945","additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/sn1persecurity.com\/wordpress\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/sn1persecurity.com\/wordpress\/category\/bug-bounties\/\" title=\"Bug Bounties\">Bug Bounties<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tCVE-2026-42945 (NGINX Rift): Heap Buffer Overflow in the Rewrite Module \u2013 Advisory + Nuclei Detection\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/sn1persecurity.com\/wordpress"},{"label":"Bug Bounties","link":"https:\/\/sn1persecurity.com\/wordpress\/category\/bug-bounties\/"},{"label":"CVE-2026-42945 (NGINX Rift): Heap Buffer Overflow in the Rewrite Module &#8211; Advisory + Nuclei Detection","link":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-42945-nginx-rift-heap-overflow-detection-with-sn1per\/"}],"jetpack_featured_media_url":"https:\/\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/08\/cve-2026-42945-nginx-rift.png","jetpack_shortlink":"https:\/\/wp.me\/pdnW96-h47","jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":18011,"url":"https:\/\/sn1persecurity.com\/wordpress\/sn1per-professional-v10-1-se-update-released\/","url_meta":{"origin":65603,"position":0},"title":"Sn1per Professional v10.1 SE Update Released!","author":"xer0dayz","date":"April 19, 2022","format":false,"excerpt":"Sn1per Professional v10.1 Scan Engine (SE) update is now available for Sn1per Professional v10.0 customers with a ton of new features and improvements. This update is part of the Sn1per Professional SE development branch which is exclusively available only to Sn1per Professional v10.0 customers. If you are a previous customer\u2026","rel":"","context":"In &quot;News&quot;","block_context":{"text":"News","link":"https:\/\/sn1persecurity.com\/wordpress\/category\/news\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/04\/Sn1per-Professional-v10.1-Update.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/04\/Sn1per-Professional-v10.1-Update.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/04\/Sn1per-Professional-v10.1-Update.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/04\/Sn1per-Professional-v10.1-Update.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/04\/Sn1per-Professional-v10.1-Update.png?resize=1050%2C600&ssl=1 3x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/04\/Sn1per-Professional-v10.1-Update.png?resize=1400%2C800&ssl=1 4x"},"classes":[]},{"id":65542,"url":"https:\/\/sn1persecurity.com\/wordpress\/cve-2026-61511-vbulletin-preauth-rce-detection-with-sn1per\/","url_meta":{"origin":65603,"position":1},"title":"CVE-2026-61511: Pre-Auth Remote Code Execution in vBulletin (runMaths) &#8211; Advisory + Nuclei Detection","author":"xer0dayz","date":"July 31, 2026","format":false,"excerpt":"CVE-2026-61511 is a critical unauthenticated RCE in vBulletin 5.x and 6.x, caused by eval injection in the runMaths() template handler. A plain-English advisory, a tested non-destructive Nuclei detection template, the 6.x patch-level trap that hides unpatched hosts, and how to find vulnerable vBulletin at scale with Sn1per.","rel":"","context":"In &quot;Attack Surface Management&quot;","block_context":{"text":"Attack Surface Management","link":"https:\/\/sn1persecurity.com\/wordpress\/category\/attack-surface-management\/"},"img":{"alt_text":"Sn1perSecurity advisory cover: CVE-2026-61511 unauthenticated eval injection RCE in vBulletin runMaths, with a Nuclei detection template and Sn1per attack surface detection","src":"https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/07\/cve-2026-61511-vbulletin.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/07\/cve-2026-61511-vbulletin.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/07\/cve-2026-61511-vbulletin.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/07\/cve-2026-61511-vbulletin.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2026\/07\/cve-2026-61511-vbulletin.png?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":26428,"url":"https:\/\/sn1persecurity.com\/wordpress\/sn1per-scan-engine-v10-5-released\/","url_meta":{"origin":65603,"position":2},"title":"Sn1per Scan Engine v10.5 Released!","author":"xer0dayz","date":"January 1, 2024","format":false,"excerpt":"Sn1per SE (Scan Engine) v10.5 is now available with a ton of new features and improvements. This update is part of the Sn1per SE development branch which is available to Sn1per Professional v10.0 and Sn1per Enterprise customers. If you are a previous customer (ie. Sn1per Professional v9.0 or less) or\u2026","rel":"","context":"In &quot;News&quot;","block_context":{"text":"News","link":"https:\/\/sn1persecurity.com\/wordpress\/category\/news\/"},"img":{"alt_text":"Sn1per SE Update","src":"https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2023\/12\/Sn1per-SE-Update.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2023\/12\/Sn1per-SE-Update.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2023\/12\/Sn1per-SE-Update.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2023\/12\/Sn1per-SE-Update.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2023\/12\/Sn1per-SE-Update.png?resize=1050%2C600&ssl=1 3x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2023\/12\/Sn1per-SE-Update.png?resize=1400%2C800&ssl=1 4x"},"classes":[]},{"id":25699,"url":"https:\/\/sn1persecurity.com\/wordpress\/sn1per-enterprise-v20231025-released\/","url_meta":{"origin":65603,"position":3},"title":"Sn1per Enterprise v20231025 Released!","author":"xer0dayz","date":"October 29, 2023","format":false,"excerpt":"We are pleased to announce the release of Sn1per Enterprise v20231025, packed with a multitude of new features and improvements exclusively for our Sn1per Enterprise customers. This blog post will provide a comprehensive overview of these latest additions. If you haven't joined the Sn1per Enterprise community yet, feel free to\u2026","rel":"","context":"In &quot;News&quot;","block_context":{"text":"News","link":"https:\/\/sn1persecurity.com\/wordpress\/category\/news\/"},"img":{"alt_text":"Sn1per-Enterprise-Released1","src":"https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/05\/Sn1per-Enterprise-Released1.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/05\/Sn1per-Enterprise-Released1.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/05\/Sn1per-Enterprise-Released1.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/05\/Sn1per-Enterprise-Released1.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/05\/Sn1per-Enterprise-Released1.png?resize=1050%2C600&ssl=1 3x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/05\/Sn1per-Enterprise-Released1.png?resize=1400%2C800&ssl=1 4x"},"classes":[]},{"id":26771,"url":"https:\/\/sn1persecurity.com\/wordpress\/cve-2024-21733-apache-tomcat-http-request-smuggling\/","url_meta":{"origin":65603,"position":4},"title":"CVE-2024-21733 Apache Tomcat HTTP Request Smuggling","author":"xer0dayz","date":"January 21, 2024","format":false,"excerpt":"Our security research team recently discovered a critical \"0day\" vulnerability which was assigned CVE-2024-21733. The vulnerability was discovered by xer0dayz from Sn1perSecurity LLC and allows attackers to force a victim's browser to de-synchronize its connection with websites hosted on top of Apache Tomcat, causing sensitive data to be smuggled from\u2026","rel":"","context":"In &quot;Attack Surface Management&quot;","block_context":{"text":"Attack Surface Management","link":"https:\/\/sn1persecurity.com\/wordpress\/category\/attack-surface-management\/"},"img":{"alt_text":"CVE-2024-21733 Apache Tomcat HTTP Request Smuggling","src":"https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2024\/01\/CVE-2024-21733.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2024\/01\/CVE-2024-21733.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2024\/01\/CVE-2024-21733.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2024\/01\/CVE-2024-21733.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2024\/01\/CVE-2024-21733.png?resize=1050%2C600&ssl=1 3x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2024\/01\/CVE-2024-21733.png?resize=1400%2C800&ssl=1 4x"},"classes":[]},{"id":18193,"url":"https:\/\/sn1persecurity.com\/wordpress\/big-ip-icontrol-rest-rce-cve-2022-1388-detection-with-sn1per-professional\/","url_meta":{"origin":65603,"position":5},"title":"BIG-IP iControl REST RCE (CVE-2022-1388) Detection with Sn1per Professional","author":"xer0dayz","date":"May 10, 2022","format":false,"excerpt":"A critical vulnerability affecting the F5 BIG-IP devices was disclosed and designated CVE-2022-1388 which allows an un-authenticated attacker to execute arbitrary code on vulnerable servers. A number of Proof-of-Concept (PoC) exploits were published online and exploit activity is actively being observed. Given the impact and severity of the vulnerability, Sn1perSecurity\u2026","rel":"","context":"In &quot;Attack Surface Management&quot;","block_context":{"text":"Attack Surface Management","link":"https:\/\/sn1persecurity.com\/wordpress\/category\/attack-surface-management\/"},"img":{"alt_text":"Sn1per-CVE-2022-1388-Scanner1","src":"https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/05\/Sn1per-CVE-2022-1388-Scanner1.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/05\/Sn1per-CVE-2022-1388-Scanner1.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/05\/Sn1per-CVE-2022-1388-Scanner1.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/05\/Sn1per-CVE-2022-1388-Scanner1.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/05\/Sn1per-CVE-2022-1388-Scanner1.png?resize=1050%2C600&ssl=1 3x, https:\/\/i0.wp.com\/sn1persecurity.com\/wordpress\/wp-content\/uploads\/2022\/05\/Sn1per-CVE-2022-1388-Scanner1.png?resize=1400%2C800&ssl=1 4x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/sn1persecurity.com\/wordpress\/wp-json\/wp\/v2\/posts\/65603","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sn1persecurity.com\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sn1persecurity.com\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sn1persecurity.com\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sn1persecurity.com\/wordpress\/wp-json\/wp\/v2\/comments?post=65603"}],"version-history":[{"count":0,"href":"https:\/\/sn1persecurity.com\/wordpress\/wp-json\/wp\/v2\/posts\/65603\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sn1persecurity.com\/wordpress\/wp-json\/wp\/v2\/media\/65604"}],"wp:attachment":[{"href":"https:\/\/sn1persecurity.com\/wordpress\/wp-json\/wp\/v2\/media?parent=65603"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sn1persecurity.com\/wordpress\/wp-json\/wp\/v2\/categories?post=65603"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sn1persecurity.com\/wordpress\/wp-json\/wp\/v2\/tags?post=65603"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}