Red Hat Security Advisory: nginx security update

Fixed packages 26

Vulnerabilities 5

• High 8.2
  CVE-2026-60005

  NGINX ngx_http_slice_module vulnerability

  NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause…

  F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Alpine Wolfi
  Jul 15, 2026
• High 8.1
  CVE-2026-42055 Public exploit

  NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

  NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_hea…

  F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  Jun 17, 2026
• High 8.1
  CVE-2026-42533 Public exploit

  NGINX Map directive and Regex matching vulnerability

  A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achiev…

  F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  Jul 15, 2026
• High 8.1
  CVE-2026-9256 Public exploit EPSS 11%

  NGINX ngx_http_rewrite_module vulnerability

  NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/…

  F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  May 22, 2026
• Medium 6.5
  CVE-2026-56434

  NGINX ngx_http_ssi_module vulnerability

  NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticat…

  F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  Jul 15, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2480746
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2489866
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2500960
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2500967
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2500992
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_93467.json
• report
  https://access.redhat.com/security/cve/CVE-2026-9256
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-9256
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-9256
• article
  https://my.f5.com/manage/s/article/K000161377
• report
  https://access.redhat.com/security/cve/CVE-2026-42055
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-42055
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-42055
• article
  https://my.f5.com/manage/s/article/K000161584
• report
  https://access.redhat.com/security/cve/CVE-2026-42533
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-42533
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-42533
• article
  https://my.f5.com/manage/s/article/K000162097
• report
  https://access.redhat.com/security/cve/CVE-2026-56434
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-56434
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-56434
• article
  https://my.f5.com/manage/s/article/K000162098
• report
  https://access.redhat.com/security/cve/CVE-2026-60005
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-60005
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-60005
• article
  https://my.f5.com/manage/s/article/K000162100