Zultys Security Advisory Notice - SAN26-002 Rev 1.0

MX-SE, MX-SE II, MX-E and MX-Virtual systems

None

Not applicable

Not applicable

On May 13, 2026 details of a Heap-based Buffer Overflow vulnerability in the NGINX ngx_http_rewrite_module was published in the CVE Vulnerability Database under CVE-2026-42945.

The vulnerability may result in the NGINX server restarting when an attacker sends specifically crafted packets.

Zultys have evaluated the reported vulnerability and confirmed that the MX-SE, MX-SE II, MX-E and MX-Virtual products are not impacted.

If additional information is required contact support@zultys.com or your Authorized Zultys Channel Partner.