Red Hat Security AdvisoryRHSA-2026:36618
nginx:1.24 security, bug fix, and enhancement update
Released 2026-07-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) nginx-1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3.aarch64::nginx:1.24, nginx-1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3.ppc64le::nginx:1.24, nginx-1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3.s390x::nginx:1.24 +32
Fixes 1 record
Priority MEDIUM 51
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.06537 · Published 2026-06-17 · Fixed in 1.31.2, 1.30.3 +2 CWE-122
