nginxcritical
ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability
A critical remote code execution vulnerability has been reported in the NGINX HTTP WebDAV module. The flaw, identified as ZDI-26-578, is described as an integer underflow that arises from insufficient validation of user-supplied data during the parsing of WebDAV requests. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.