RHSA-2026:17791: Critical: nginx security update
Published May 15, 2026
·Updated
Critical: nginx security update
Other sources
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
58 affected componentsFixes available
Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
redhat/nginx<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-all-modules<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-debugsource<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-filesystem<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-image-filter<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-image-filter-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-perl<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-perl-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-xslt-filter<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-xslt-filter-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-mail<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-mail-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-stream<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-stream-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-debugsource<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-image-filter<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-image-filter-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-perl<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-perl-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-xslt-filter<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-xslt-filter-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-mail<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-mail-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-stream<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-stream-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx<1.20.1-10.el9_0.4.aa
1.20.1-10.el9_0.4.aa
redhat/nginx-debuginfo<1.20.1-10.el9_0.4.aa
1.20.1-10.el9_0.4.aa
redhat/nginx-debugsource<1.20.1-10.el9_0.4.aa
1.20.1-10.el9_0.4.aa
redhat/nginx-mod-http-image-filter<1.20.1-10.el9_0.4.aa
1.20.1-10.el9_0.4.aa
redhat/nginx-mod-http-image-filter-debuginfo<1.20.1-10.el9_0.4.aa
1.20.1-10.el9_0.4.aa
redhat/nginx-mod-http-perl<1.20.1-10.el9_0.4.aa
1.20.1-10.el9_0.4.aa
redhat/nginx-mod-http-perl-debuginfo<1.20.1-10.el9_0.4.aa
1.20.1-10.el9_0.4.aa
redhat/nginx-mod-http-xslt-filter<1.20.1-10.el9_0.4.aa
1.20.1-10.el9_0.4.aa
redhat/nginx-mod-http-xslt-filter-debuginfo<1.20.1-10.el9_0.4.aa
1.20.1-10.el9_0.4.aa
redhat/nginx-mod-mail<1.20.1-10.el9_0.4.aa
1.20.1-10.el9_0.4.aa
redhat/nginx-mod-mail-debuginfo<1.20.1-10.el9_0.4.aa
1.20.1-10.el9_0.4.aa
redhat/nginx-mod-stream<1.20.1-10.el9_0.4.aa
1.20.1-10.el9_0.4.aa
redhat/nginx-mod-stream-debuginfo<1.20.1-10.el9_0.4.aa
1.20.1-10.el9_0.4.aa
redhat/nginx-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-debugsource<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-image-filter<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-image-filter-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-perl<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-perl-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-xslt-filter<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-http-xslt-filter-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-mail<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-mail-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-stream<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
redhat/nginx-mod-stream-debuginfo<1.20.1-10.el9_0.4
1.20.1-10.el9_0.4
Remediation
Event History
May 15, 2026
Advisory Published
via Red Hat·03:45 PM
Data Sourced
via Red Hat·03:45 PM
DescriptionSeverityAffected Software
May 18, 2026
Advisory Published
via Red Hat·04:06 PM
Data Sourced
via Red Hat·04:06 PM
Remedy
Frequently Asked Questions
1
What is the severity of RHSA-2026:17791?
RHSA-2026:17791 is classified as a critical severity vulnerability.
2
What vulnerability is addressed in RHSA-2026:17791?
RHSA-2026:17791 addresses a critical arbitrary code execution vulnerability in NGINX, specifically identified as CVE-2026-42945.
3
How do I fix RHSA-2026:17791?
To fix RHSA-2026:17791, you should update NGINX to version 1.20.1-10.el9_0.4 or later.
4
Which systems are affected by RHSA-2026:17791?
RHSA-2026:17791 affects multiple deployments of Red Hat Enterprise Linux, including ARM, IBM z Systems, and x86_64 architectures.
5
Is RHSA-2026:17791 a common vulnerability?
RHSA-2026:17791 is significant due to its critical classification and the potential for arbitrary code execution, making it a high priority for affected users.