Nginx — PoC Archivehttps://poc.intelseclab.com/tags/nginx/Latest proof-of-concept entries.Hugoen-usSun, 16 Aug 2026 00:00:00 +0000UniFi OS -- Unauthenticated Command Injection RCE (CVE-2026-34910)https://poc.intelseclab.com/pocs/network/2026-08-16_cve-2026-34910-unifi-os-unauth-rce/Sun, 16 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-16_cve-2026-34910-unifi-os-unauth-rce/Critical severity (CVSS 10) — network · CVE-2026-34910, CVE-2026-34909, CVE-2026-34908. Status: Patched. Affects: Ubiquiti UniFi OS Server. Tags: ubiquiti, unifi, unifi-os, auth-bypass, path-traversal, command-injection, rce, unauth, kev, mirai, nginx, CVE-2026-34910.networkCriticalubiquitiunifiunifi-osauth-bypasspath-traversalcommand-injectionrceunauthkevmirainginxCVE-2026-34910nginx PCRE Capture Variable Heap Overflow to Pre-Auth RCE (CVE-2026-42533)https://poc.intelseclab.com/pocs/web/2026-08-16_cve-2026-42533-nginx-pcre-heap-overflow-rce/Sun, 16 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-08-16_cve-2026-42533-nginx-pcre-heap-overflow-rce/Critical severity (CVSS 9.8) — web · CVE-2026-42533. Status: Patched. Affects: nginx 1.30.1 (and likely earlier versions). Tags: nginx, pcre, heap-overflow, rce, preauth, info-leak, capture-variable, map-directive, aslr-bypass, CVE-2026-42533.webCriticalnginxpcreheap-overflowrcepreauthinfo-leakcapture-variablemap-directiveaslr-bypassCVE-2026-42533IngressNightmare: Kubernetes ingress-nginx Admission Controller Shared-Library Injection RCE (CVE-2025-1974)https://poc.intelseclab.com/pocs/cloud/2026-07-06_cve-2025-1974-ingressnightmare-nginx-admission-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-06_cve-2025-1974-ingressnightmare-nginx-admission-rce/Critical severity (CVSS 9.8) — cloud · CVE-2025-1974. Status: Weaponized. Affects: Kubernetes ingress-nginx admission controller. Tags: kubernetes, ingress-nginx, ingressnightmare, admission-controller, nginx, ssl-engine, shared-library-injection, cluster-secrets, docker, python, c, cwe-94.cloudCriticalkubernetesingress-nginxingressnightmareadmission-controllernginxssl-engineshared-library-injectioncluster-secretsdockerpythonccwe-94nginx Resolver Use-After-Free in OCSP Stapling (CVE-2026-40701)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40701-nginx-resolver-ocsp-uaf/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40701-nginx-resolver-ocsp-uaf/Medium severity (CVSS 6.3) — web · CVE-2026-40701. Status: PoC. Affects: nginx (open source). Tags: nginx, use-after-free, ocsp-stapling, resolver, memory-corruption, docker-lab, tls.webMediumnginxuse-after-freeocsp-staplingresolvermemory-corruptiondocker-labtlsNginx QUIC/HTTP-3 DCID Length Heap Overflow Lab (CVE-2026-0211)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0211-nginx-quic-heap-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0211-nginx-quic-heap-overflow/High severity — web · CVE-2026-0211 (repository explicitly labels this as a hypothetical/simulated CVE for coursework, not a confirmed vendor-assigned vulnerability). Status: PoC. Affects: A custom, deliberately vulnerabilized fork of Nginx 1.25.3's QUIC transport module (ngx_event_quic_transport.c), run inside a purpose-built Docker lab — not the stock upstream Nginx release. Tags: nginx, quic, http-3, heap-overflow, dos, fuzzing, dcid, academic-lab, docker.webHighnginxquichttp-3heap-overflowdosfuzzingdcidacademic-labdockernginx PoolSlip × Rift Chained ASLR-Independent Remote Code Execution (CVE-2026-9256 / CVE-2026-42945)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-9256-nginx-poolslip-rift-rce-chain/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-9256-nginx-poolslip-rift-rce-chain/Critical severity — web · CVE-2026-9256 ("PoolSlip"), chained with CVE-2026-42945 ("rift"). Status: PoC. Affects: nginx (rewrite engine). Tags: nginx, heap-overflow, heap-over-read, aslr-bypass, rce, rewrite-engine, request-smuggling-adjacent, chained-exploit.webCriticalnginxheap-overflowheap-over-readaslr-bypassrcerewrite-enginerequest-smuggling-adjacentchained-exploitNGINX HTTP/2 Frame Injection via Vulnerable Upstream Proxying (CVE-2026-42926)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42926-nginx-http2-frame-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42926-nginx-http2-frame-injection/High severity — web · CVE-2026-42926. Status: PoC. Affects: NGINX (HTTP/2 upstream proxying). Tags: nginx, http2, frame-injection, reverse-proxy, request-smuggling, docker-lab.webHighnginxhttp2frame-injectionreverse-proxyrequest-smugglingdocker-labHPE Aruba AOS-CX Pre-Auth REST API Bypass via nginx Version Smuggling (CVE-2026-23813)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-23813-aruba-aoscx-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-23813-aruba-aoscx-auth-bypass/Critical severity (CVSS 9.8) — network · CVE-2026-23813. Status: PoC. Affects: HPE Aruba Networking AOS-CX. Tags: aruba, aos-cx, authentication-bypass, nginx, ovsdb, network-switch, config-disclosure, cwe-287.networkCriticalarubaaos-cxauthentication-bypassnginxovsdbnetwork-switchconfig-disclosurecwe-287NGINX Rift — Heap Buffer Overflow RCE (CVE-2026-42945)https://poc.intelseclab.com/pocs/web/2026-05-14_nginx-rift-cve-2026-42945/Thu, 14 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-14_nginx-rift-cve-2026-42945/Critical severity (CVSS 9.8) — web · CVE-2026-42945. Status: Weaponized. Affects: NGINX Open Source / NGINX Plus. Tags: RCE, unauthenticated, nginx, heap-overflow, buffer-overflow, rewrite.webCriticalRCEunauthenticatednginxheap-overflowbuffer-overflowrewrite