A critical nginx vulnerability, 9. 2 on CVSS, sat in the code for eighteen years. It was found not by a human but by an AI agent, and six hours were enough.
Source: [Dev.to](https://dev.to/cynepmyx/nginx-is-not-the-bug-two-lines-of-your-config-are-cve-2026-42945-on-a-live-stand-5fc8)