onyx

onyx --cves cve-2010-2266

CVE-2010-2266

MEDPOCnginx
score
<0.1
cvss
5.0
epss
21.5%
published
2010-06-15
kev added
—
first seen

nginx 0.8.36 contains a denial of service caused by certain encoded directory traversal sequences that trigger memory corruption, letting remote attackers crash the server, exploit requires sending crafted requests with specific encoded sequences.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2010-06-15 — PublishedP2026-10-21 — Tracked by OnyxT2026-10-21 — Public PoC: http://www.exploit-db.com/exploits/13818/Xscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 21.5%2026-09-23: epss 21.5%2026-09-24: epss 21.5%2026-09-25: epss 21.5%2026-09-26: epss 21.5%2026-09-27: epss 21.5%2026-09-28: epss 21.5%2026-09-29: epss 21.5%2026-09-30: epss 21.5%2026-10-01: epss 21.5%2026-10-02: epss 21.5%2026-10-03: epss 21.5%2026-10-04: epss 21.5%2026-10-05: epss 21.5%2026-10-06: epss 21.5%2026-10-07: epss 21.5%2026-10-08: epss 21.5%2026-10-09: epss 21.5%2026-10-10: epss 21.5%2026-10-11: epss 21.5%2026-10-12: epss 21.5%2026-10-13: epss 21.5%2026-10-14: epss 21.5%2026-10-15: epss 21.5%2026-10-16: epss 21.5%2026-10-18: epss 21.5%2026-10-19: epss 21.5%2026-10-20: epss 21.5%2026-10-21: epss 21.5%21.5%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx
  3. Public PoC http://www.exploit-db.com/exploits/13818/

Exploit availability

Weaknesses

CWE-22

References 1