Read the docs
Red Hat Security Advisory

RHSA-2026:19371

nginx:1.24 security update

Released 2026-05-19 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 1 record

TI-2026-31136 CVE-2026-42945 · GHSA-gcgv-v5gf-c543

NGINX ngx_http_rewrite_module vulnerability

Priority HIGH 78

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.68047 Published 2026-05-13 Fixed in R37, R36 P4 +3 CWE-122