RHSA-2026:17790: Critical: nginx security update
Published May 15, 2026
·Updated
Critical: nginx security update
Other sources
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
78 affected componentsFixes available
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for Power, little endian - 4 years of support
Red Hat Red Hat Enterprise Linux for x86_64 - 4 years of updates
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
redhat/nginx<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-all-modules<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-core<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-core-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-debugsource<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-filesystem<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-image-filter<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-image-filter-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-perl<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-perl-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-xslt-filter<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-xslt-filter-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-mail<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-mail-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-stream<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-stream-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-core<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-core-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-debugsource<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-image-filter<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-image-filter-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-perl<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-perl-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-xslt-filter<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-xslt-filter-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-mail<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-mail-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-stream<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-stream-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-core<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-core-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-debugsource<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-image-filter<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-image-filter-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-perl<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-perl-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-xslt-filter<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-http-xslt-filter-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-mail<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-mail-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-stream<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-stream-debuginfo<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-core<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-core-debuginfo<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-debuginfo<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-debugsource<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-mod-http-image-filter<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-mod-http-image-filter-debuginfo<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-mod-http-perl<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-mod-http-perl-debuginfo<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-mod-http-xslt-filter<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-mod-http-xslt-filter-debuginfo<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-mod-mail<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-mod-mail-debuginfo<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-mod-stream<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-mod-stream-debuginfo<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
redhat/nginx-mod-devel<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-devel<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-devel<1.26.3-1.el10_0.9
1.26.3-1.el10_0.9
redhat/nginx-mod-devel<1.26.3-1.el10_0.9.aa
1.26.3-1.el10_0.9.aa
Remediation
Event History
May 15, 2026
Advisory Published
via Red Hat·03:44 PM
Data Sourced
via Red Hat·03:44 PM
DescriptionSeverityAffected Software
May 19, 2026
Advisory Published
via Red Hat·04:07 PM
Data Sourced
via Red Hat·04:07 PM
Remedy
Frequently Asked Questions
1
What is the severity of RHSA-2026:17790?
RHSA-2026:17790 has been classified as critical due to an arbitrary code execution vulnerability in nginx.
2
How do I fix RHSA-2026:17790?
To resolve RHSA-2026:17790, update nginx to version 1.26.3-1.el10_0.9 or later.
3
Which systems are affected by RHSA-2026:17790?
RHSA-2026:17790 affects several Red Hat Enterprise Linux systems including x86_64, ARM, and IBM z Systems.
4
What does the vulnerability in RHSA-2026:17790 allow?
The vulnerability in RHSA-2026:17790 allows for arbitrary code execution, which can compromise the security of the server.
5
Is there a workaround for RHSA-2026:17790?
There is no documented workaround for RHSA-2026:17790; the recommended action is to apply the security update.