Red Hat Security Advisory

RHSA-2026:36639

nginx:1.26 security, bug fix, and enhancement update

Released 2026-07-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) nginx-2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2.aarch64::nginx:1.26, nginx-2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2.ppc64le::nginx:1.26, nginx-2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2.s390x::nginx:1.26 +32

TI-2026-30432 CVE-2026-42055 · GHSA-78jw-ww3g-9wp7

MEDIUM 51

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.06537 Published 2026-06-17 Fixed in 1.31.2, 1.30.3 +2 CWE-122