Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

A critical vulnerability (CVE-2026-42533) in NGINX allows unauthenticated remote code execution, potentially due to a heap buffer overflow triggered by a specific configuration involving regex-based maps. The vulnerability affects a wide range of NGINX versions dating back to 2011, and while initial reports focused on…