Lyrie
Active Exploitation
1 sources verified·1 min read
By Lyrie Threat Intelligence·5/26/2026

0day Intel: CVE-2026-9256 — NGINX heap buffer overflow (CVSS 9.2 Critical)

Overlapping PCRE

Source: X search for CVE-2026 critical

Posted: 2026-05-25T16:02:24.000Z

Likes: 46

Full Tweet

CVE-2026-9256 — NGINX heap buffer overflow (CVSS 9.2 Critical)

Overlapping PCRE captures in rewrite → heap overflow + heap info leak. Unauthenticated, remote. DoS + RCE path confirmed.

Fixed: nginx 1.31.1 / 1.30.2

https://t.co/2jm0CQzipV

Source Link

https://x.com/i/status/2058941762844897572

Lyrie Verdict

Lyrie's autonomous defense layer flags this class of exposure the moment it surfaces — no signature update required.

Validated sources

  1. [1]@2054526347699990528 on X