Red Hat Security Advisory

RHSA-2026:83427

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-10-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images nginx-1.30.6-1.hum1@aarch64, nginx-1.30.6-1.hum1@s390x, nginx-1.30.6-1.hum1@src +34

Fixes 4 records

TI-2026-73990 CVE-2026-15176 · GHSA-cvv4-j4mx-w8q5

Heap buffer overflow in NGINX alias and rewrite handling

MEDIUM 44

A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00998 Published 2026-10-14 Partial fix · 37.1.0.1, 37.0.5.1 +2 CWE-122

TI-2026-74062 CVE-2026-97205 · GHSA-ff5w-vvxc-fm9x

Use-after-free in NGINX ngx_http_core_module can crash workers

MEDIUM 43

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00834 Published 2026-10-14 Partial fix · 37.1.0.1, 37.0.5.1 +2 CWE-416

TI-2026-74063 CVE-2026-97629 · GHSA-qhwc-5g9q-3669

Forged SSL sessions in NGINX let attackers bypass client certificates

LOW 36

Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00246 Published 2026-10-14 Partial fix · 37.1.0.1, 37.0.5.1 +2 CWE-908

TI-2026-74060 CVE-2026-95101 · GHSA-g6r5-95cx-mpp9

Data injection in NGINX HTTP/3 proxied requests

LOW 36

Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00346 Published 2026-10-14 Partial fix · 37.2.0.1, 37.0.7.1 +2 CWE-172