NGINX rewrite module heap buffer overflow (CVE-2026-42945)

Summary

Crafted HTTP requests may crash a worker or potentially execute code.

Vulnerability ID	Vulnerability Overview
CVE-2026-42945	Certain rewrite configurations combine unnamed PCRE captures and a replacement containing a question mark with subsequent rewrite, if, or set directives. Crafted requests can trigger a heap buffer overflow; code execution may be possible if ASLR is disabled or bypassed.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16
 

 

Back to Security Notices

Date	Description
10/14/2026	Initial release

Back to Security Notices