Red Hat Security Advisory

RHSA-2026:59220

nginx security update

Released 2026-08-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) nginx-2:1.26.3-6.el10_2.6, nginx-all-modules-2:1.26.3-6.el10_2.6, nginx-core-2:1.26.3-6.el10_2.6 +6
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) nginx-mod-devel-2:1.26.3-6.el10_2.6

TI-2026-42786 CVE-2026-60005 · GHSA-vxcv-h5wj-jxr5

MEDIUM 45

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0074 Published 2026-07-15 Partial fix · 37.0.3.1, R36 P7 +2 CWE-908

TI-2026-40780 CVE-2026-56434 · GHSA-m73p-xg7q-m8f2

LOW 37

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00486 Published 2026-07-15 Partial fix · 37.0.3.1, R36 P7 +2 CWE-416