#waf

Field Note · May 28, 2026 · Colten Anderson

NGINX Rift: four places apt upgrade doesn't reach

The host patch for CVE-2026-42945 shipped on day one. The container images, the App Protect WAF in front of it, the downstream forks, and the config audit it leaves behind are separate jobs.