A critical heap buffer overflow just hit every standard NGINX build. And it's been sitting there since 2008.

Active exploitation is confirmed in the wild. The public PoC came out on disclosure day.

So we stepped in and just added detection for CVE-2026-42945 to our penetration testing module. You can access it here

Don’t have access to penetration testing? Drop us a message and one of our team will be happy to take you through how it can benefit and protect your business.