Red Hat Security AdvisoryRHSA-2026:46012
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-07-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images nginx-2:1.30.4-2.hum1@aarch64, nginx-2:1.30.4-2.hum1@src, nginx-2:1.30.4-2.hum1@x86_64 +22
Fixes 3 records
Priority HIGH 75
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.06296 · Published 2026-07-15 · Partial fix · 37.0.3.1, R36 P7 +2 CWE-122
Priority MEDIUM 45
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.0074 · Published 2026-07-15 · Partial fix · 37.0.3.1, R36 P7 +2 CWE-908
Priority LOW 37
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module.
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00486 · Published 2026-07-15 · Partial fix · 37.0.3.1, R36 P7 +2 CWE-416
