CentOS Linux 8 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc (CENTOS-STREAM8:CLSA-2026:1782317620)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1782317620 advisory. - Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious HTTP...

AlmaLinux 9.2 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc (ALMALINUX9.2:CLSA-2026:1783696553)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783696553 advisory. - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists...

CentOS Linux 8.5 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc (CENTOS8.5:CLSA-2026:1779789551)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1779789551 advisory. - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directiv...

Rocky Linux 9.6 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1776446328)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776446328 advisory. - When the ngxmailauthhttpmodule module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker...

ROOT-OS-ALPINE-320-CVE-2026-42946 CVE-2026-42946 in nginx - Patched by Root

Root has patched CVE-2026-42946 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-1642 CVE-2026-1642 in nginx - Patched by Root

Root has patched CVE-2026-1642 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-42945 CVE-2026-42945 in nginx - Patched by Root

Root has patched CVE-2026-42945 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-56434 CVE-2026-56434 in nginx - Patched by Root

Root has patched CVE-2026-56434 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-42533 CVE-2026-42533 in nginx - Patched by Root

Root has patched CVE-2026-42533 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-60005 CVE-2026-60005 in nginx - Patched by Root

Root has patched CVE-2026-60005 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-27654 CVE-2026-27654 in nginx - Patched by Root

Root has patched CVE-2026-27654 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-27651 CVE-2026-27651 in nginx - Patched by Root

Root has patched CVE-2026-27651 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-32647 CVE-2026-32647 in nginx - Patched by Root

Root has patched CVE-2026-32647 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2026-1642 CVE-2026-1642 in nginx - Patched by Root

Root has patched CVE-2026-1642 in the nginx package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2026-27651 CVE-2026-27651 in nginx - Patched by Root

Root has patched CVE-2026-27651 in the nginx package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2026-32647 CVE-2026-32647 in nginx - Patched by Root

Root has patched CVE-2026-32647 in the nginx package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2026-27654 CVE-2026-27654 in nginx - Patched by Root

Root has patched CVE-2026-27654 in the nginx package for Root:Alpine:3.21. Multiple fixed versions available...

EUVD-2026-88568

Nginx Proxy Manager through 2.16.0 fails to restrict the advancedconfig field to administrators, allowing non-admin users with manage permissions to inject arbitrary nginx directives. Attackers can inject malicious nginx configuration such as alias directives to serve arbitrary files or control...

EUVD-2026-88567

Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses against any account. Attackers can brute-force login credentials via POST /api/tokens and subsequently guess TOTP codes via POST /api/tokens/2f...

Important: nginx-mod-njs

Issue Overview: Description NGINX JavaScript njs and QuickJS qjs engines have a vulnerability when a jsaccess handler performs asynchronous request body processing and an exception is thrown during asynchronous access-control evaluation before an explicit access denial is returned. An...