SUSE SLES15 Security Update : nginx (SUSE-SU-2026:3448-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3448-1 advisory. - CVE-2026-42055: heap buffer overflow in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules bsc1268492. - CVE-2026-42533: heap...

Security update for nginx

This update for nginx fixes the following issues: CVE-2026-42055: heap buffer overflow in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules bsc1268492. CVE-2026-42533: heap buffer overflow in the map directive and regex matching bsc1271514. CVE-2026-48142: heap buffer overread in the...

SUSE-SU-2026:3448-1 Security update for nginx

This update for nginx fixes the following issues: - CVE-2026-42055: heap buffer overflow in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules bsc1268492. - CVE-2026-42533: heap buffer overflow in the map directive and regex matching bsc1271514. - CVE-2026-48142: heap buffer overread in the...

Security update for nginx

This update for nginx fixes the following issues CVE-2026-42055: heap-based buffer overflow in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules bsc1268492. CVE-2026-48142: heap buffer over-read in the ngxhttpcharsetmodule module bsc1268495. Remote denial of service via the HTTP/2 bomb explo...

BIT-NGINX-GATEWAY-FABRIC-2026-48142 NGINX ngx_http_charset_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcharsetmodule module. When content is served or proxied through a location block with both sourcecharset utf-8; and a charset directive for example, charset koi8-r; configured, remote, unauthenticated attackers can send requests ...

PT-2026-65035

NGINX Plus and NGINX Open Source have a vulnerability in the ngx http charset module module. When content is served or proxied through a location block with both source charset utf-8; and a charset directive for example, charset koi8-r; configured, remote, unauthenticated attackers can send...

Updated nginx packages fix security vulnerabilities

ngxhttpproxyv2module and ngxhttpgrpcmodule vulnerability. CVE-2026-42055 ngxhttpcharsetmodule vulnerability. CVE-2026-48142...

MGASA-2026-0279 Updated nginx packages fix security vulnerabilities

ngxhttpproxyv2module and ngxhttpgrpcmodule vulnerability. CVE-2026-42055 ngxhttpcharsetmodule vulnerability. CVE-2026-48142...

Amazon Linux 2023 : nginx, nginx-all-modules, nginx-core (ALAS2023-2026-1922)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1922 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion to 2 or grpcpass directives...

ROS-20260714-73-0061

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause...

ROS-20260714-73-0060

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause...

Important: nginx

Issue Overview: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion to 2 or grpcpass directives are used to proxy HTTP/2 traffic, the ignoreinvalidheaders directive is set to off, and...

Amazon Linux 2 : nginx, --advisory ALAS2NGINX1-2026-014 (ALASNGINX1-2026-014)

The version of nginx installed on the remote host is prior to 1.30.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NGINX1-2026-014 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This...

Important: nginx

Issue Overview: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion to 2 or grpcpass directives are used to proxy HTTP/2 traffic, the ignoreinvalidheaders directive is set to off, and...

OESA-2026-2801 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion ...

OESA-2026-2800 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion ...

OESA-2026-2798 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion ...

OESA-2026-2799 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion ...

NGINX ngx_http_charset_module vulnerability

...

BIT-NGINX-GATEWAY-2026-48142 NGINX ngx_http_charset_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcharsetmodule module. When content is served or proxied through a location block with both sourcecharset utf-8; and a charset directive for example, charset koi8-r; configured, remote, unauthenticated attackers can send requests ...