0xCyberstan/CVE-2026-42533-POC

PoC

CVE-2026-42533: pre-auth nginx heap overflow and info leak from PCRE capture clobbering in the map/script engine, chained to RCE.

view exploit source poc_in_githubauthor 0xCyberstanpublished 2026-08-05catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-42533US	—	0.89% (59th)	Exploit	2026-07-15
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before refe…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.