Red Hat Security Advisory

RHSA-2026:66542

nginx security update

Released 2026-09-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) nginx-2:1.20.1-28.el9_8.6, nginx-all-modules-2:1.20.1-28.el9_8.6, nginx-core-2:1.20.1-28.el9_8.6 +6
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) nginx-mod-devel-2:1.20.1-28.el9_8.6

Fixes 1 record

TI-2026-30813 CVE-2026-42533 · GHSA-fxfg-v4rj-hp95

NGINX Map directive and Regex matching vulnerability

HIGH 75

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.06296 Published 2026-07-15 Partial fix · 37.0.3.1, R36 P7 +2 CWE-122