> Source: [sk185046](https://support.checkpoint.com/results/sk/sk185046)

# sk185046 - Check Point response to CVE-2026-42945, CVE-2026-8711, CVE-2026-9256 (Multiple NGINX Vulnerabilities)

| Property | Value |
|----------|-------|
| Solution ID | sk185046 |
| Date Created | 2026-06-10 |
| Last Modified | 2026-06-10 |
| Technical Level | General |
| Products | WAF Application Security |
| Versions | Cloud |

## Symptoms

- * Multiple vulnerabilities in NGINX were reported: CVE-2026-42945, CVE-2026-8711, and CVE-2026-9256.

* [CVE-2026-42945](https://www.cve.org/CVERecord?id=CVE-2026-42945): NGINX Plus and NGINX Open Source are affected by a vulnerability in `"ngx_http_rewrite_module"` under specific rewrite directive conditions involving unnamed PCRE captures. An unauthenticated attacker may send crafted HTTP requests that could trigger a heap buffer overflow, leading to a worker process restart or, if ASLR is disabled, possible code execution.

* [CVE-2026-8711](https://www.cve.org/CVERecord?id=CVE-2026-8711) affects NGINX JavaScript (njs) versions 0.9.4 through 0.9.8, with remediation introduced in version 0.9.9. Vulnerable deployments may be exposed to buffer overflow conditions that could result in denial of service and, in certain scenarios, possible remote code execution.

* [CVE-2026-9256](https://www.cve.org/CVERecord?id=CVE-2026-9256) affects the NGINX rewrite module under specific configuration and request-processing conditions, with public reporting referencing NGINX version 1.31.0. A remote unauthenticated attacker may trigger memory corruption that could potentially lead to denial of service or remote code execution in affected environments.

## Solution

No action is required.  
All Check Point-managed NGINX deployments, including Check Point WAF SaaS, AppSec Gateway, and Unified Container configurations, **are not vulnerable to these CVEs.**

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content