RHSA-2026:17753: Critical: nginx:1.26 security update
Published May 15, 2026
·Updated
Critical: nginx:1.26 security update
Other sources
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
79 affected componentsFixes available
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Life Cycle
Red Hat Red Hat Enterprise Linux for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
redhat/nginx<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-all-modules<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-filesystem<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-core<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-core-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-debugsource<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-devel<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-image-filter<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-image-filter-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-perl<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-perl-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-xslt-filter<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-xslt-filter-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-mail<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-mail-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-stream<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-stream-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-core<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-core-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-debugsource<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-devel<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-image-filter<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-image-filter-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-perl<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-perl-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-xslt-filter<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-xslt-filter-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-mail<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-mail-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-stream<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-stream-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-core<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-core-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-debugsource<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-devel<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-image-filter<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-image-filter-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-perl<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-perl-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-xslt-filter<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-http-xslt-filter-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-mail<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-mail-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-stream<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx-mod-stream-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3
1.26.3-1.module+el9.6.0+24296+87cb744c.3
redhat/nginx<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-core<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-core-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-debugsource<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-mod-devel<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-mod-http-image-filter<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-mod-http-image-filter-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-mod-http-perl<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-mod-http-perl-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-mod-http-xslt-filter<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-mod-http-xslt-filter-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-mod-mail<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-mod-mail-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-mod-stream<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
redhat/nginx-mod-stream-debuginfo<1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
1.26.3-1.module+el9.6.0+24296+87cb744c.3.aa
Remediation
Event History
May 15, 2026
Advisory Published
via Red Hat·09:42 AM
Data Sourced
via Red Hat·09:42 AM
DescriptionSeverityAffected Software
Jun 13, 2026
Advisory Published
via Red Hat·10:49 PM
Data Sourced
via Red Hat·10:49 PM
Remedy
Frequently Asked Questions
1
What is the severity of RHSA-2026:17753?
RHSA-2026:17753 is classified as a critical security update due to an arbitrary code execution vulnerability in nginx.
2
How do I fix RHSA-2026:17753?
To fix RHSA-2026:17753, upgrade nginx to version 1.26.3-1.module+el9.6.0+24296+87cb744c.3.
3
What products are affected by RHSA-2026:17753?
RHSA-2026:17753 affects various versions of Red Hat Enterprise Linux, including for x86_64, ARM 64, and IBM z Systems.
4
What are the implications of not addressing RHSA-2026:17753?
Failing to address RHSA-2026:17753 may lead to a potential compromise of your system due to arbitrary code execution.
5
Is there a reference for more details on RHSA-2026:17753?
For more details on RHSA-2026:17753, refer to the appropriate advisories and security documentation from Red Hat.