Red Hat Security AdvisoryRHSA-2026:67315
nginx:1.24 security update
Released 2026-09-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) nginx-1:1.24.0-3.module+el8.10.0+24848+0300f002.5.aarch64::nginx:1.24, nginx-1:1.24.0-3.module+el8.10.0+24848+0300f002.5.ppc64le::nginx:1.24, nginx-1:1.24.0-3.module+el8.10.0+24848+0300f002.5.s390x::nginx:1.24 +28
Fixes 1 record
Priority HIGH 75
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.06296 · Published 2026-07-15 · Partial fix · 37.0.3.1, R36 P7 +2 CWE-122
