NGINX Rift Critical RCE Exploitation Active | MSSP Advisory

Attackers are actively exploiting CVE-2026-42945, a critical NGINX vulnerability dubbed NGINX Rift that allows unauthenticated remote code execution and denial-of-service attacks through specially crafted HTTP requests. NGINX is the most widely deployed web server globally, making this vulnerability particularly dangerous for widespread exploitation. The exploit can be triggered reliably with minimal attacker effort.

Your own MSSP infrastructure likely runs NGINX for web services, reverse proxies, or load balancing, putting your entire client management stack at risk of compromise through a single HTTP request. Every client running web applications, reverse proxies, or API gateways on NGINX faces immediate risk of system takeover, and they expect you to have warned them before their systems get owned.

📬