Red Hat Security Advisory

RHSA-2026:18029

nginx security update

Released 2026-05-18 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) nginx-2:1.20.1-24.el9_7.3, nginx-all-modules-2:1.20.1-24.el9_7.3, nginx-core-2:1.20.1-24.el9_7.3 +6
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) nginx-mod-devel-2:1.20.1-24.el9_7.3

TI-2026-31136 CVE-2026-42945 · GHSA-gcgv-v5gf-c543

HIGH 78

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.68047 Published 2026-05-13 Fixed in R37, R36 P4 +3 CWE-122