New NGINX 0-Day RCE “nginx-poolslip” Affects Millions of NGINX Servers

A newly disclosed zero-day remote code execution (RCE) vulnerability, dubbed nginx-poolslip, has been identified in NGINX version 1.31.0, the latest stable release of the widely deployed web server software. The discovery was made by security agent Vega, operating under the NebSec security team, and publicly disclosed via X (formerly Twitter) on May 21, 2026. Just […] The post New NGINX 0-Day RCE “nginx-poolslip” Affects Millions of NGINX Servers appeared first on Cyber Security News.