NGINX patches critical CVE-2026-42533 heap overflow, prevents crashes and RCE
NGINX 1.30.4 (stable) and 1.31.3 (mainline) ship fixes for CVE-2026-42533, a heap buffer overflow that lets unauthenticated attackers crash worker processes or execute code via crafted map‑directive regex requests. Administrators should upgrade immediately to avoid denial‑of‑service and potential remote code execution.