
Vulnerabilidad en NGINX
Script to non-intrusively check if an NGINX installation could be affected by vulnerability CVE-2026-42533.
Important: This project does not exploit the vulnerability. It only performs local checks on the installed version and server configuration to identify potential exposures.
map directive.~ and ~*) in configuration files./etc/nginxGrant execution permissions:
chmod +x nginx_checker.sh
Execute:
./nginx_checker.sh
========================================
Verificación de vulnerabilidad NGINX
========================================
[+] Versión instalada: 1.30.2
[!] La versión podría ser vulnerable.
Buscando configuraciones potencialmente afectadas...
[+] Se encontró directiva 'map' en:
/etc/nginx/nginx.conf
[+] Se encontraron expresiones regulares en:
/etc/nginx/conf.d/default.conf
[!] La configuración utiliza directivas que podrían verse afectadas.
Revise manualmente la configuración.
Recomendación:
- Actualizar a una versión corregida.
- Revisar reglas 'map' con expresiones regulares.
This script does not confirm the existence of the vulnerability.
The check is based on:
The vulnerability depends on specific configuration conditions, so only a manual review or an update to a patched version can completely rule out the risk.
map rules that use regular expressions.This project is for educational and defensive audit purposes. The author is not responsible for misuse of the software.
MIT License