CVE-2019-7401

CVE-2019-7401 is a critical heap-based buffer overflow vulnerability affecting NGINX Unit versions prior to 1.7.1. An unauthenticated attacker can exploit this by sending a specially crafted request to the router process, potentially leading to a denial of service (router crash) or other unspecified impacts. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity, posing a high risk to confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.