Red Hat Security AdvisoryRHSA-2026:67308
nginx:1.24 security update
Released 2026-09-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) nginx-1:1.24.0-7.module+el9.8.0+24846+e7eec568.5.aarch64::nginx:1.24, nginx-1:1.24.0-7.module+el9.8.0+24846+e7eec568.5.ppc64le::nginx:1.24, nginx-1:1.24.0-7.module+el9.8.0+24846+e7eec568.5.s390x::nginx:1.24 +32
Fixes 1 record
Priority HIGH 75
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.06296 · Published 2026-07-15 · Partial fix · 37.0.3.1, R36 P7 +2 CWE-122
