tag

Fuzzing

Nginx QUIC/HTTP-3 DCID Length Heap Overflow Lab (CVE-2026-0211)

CVE-2026-0211 (repository explicitly labels this as a hypothetical/simulated CVE for coursework, not a confirmed vendor-assigned vulnerability)· A custom, deliberately vulnerabilized fork of Nginx 1.25.3's QUIC transport module (ngx_event_quic_transport.c), run inside a purpose-built Docker lab — not the stock upstream Nginx release unpatched