Known vulnerabilities in nginx (Red Hat package)
Vendor:
Red Hat Inc.
Software:
nginx (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:nginx_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
15
Public exploits:
4
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
1.20.1-28.el9_8.6
1.26.3-6.el10_2.6
1.26.3-6.el10_2.5
1.26.3-6.el10_2.4
1.20.1-28.el9_8.3
1.20.1-28.el9_8.2
1.20.1-24.el9_7.3
1.20.1-22.el9_6.6
1.20.1-10.el9_0.4
1.26.3-1.el10_0.9
1.20.1-14.el9_2.6
1.20.1-10.el9_0.3
1.20.1-14.el9_2.5
1.20.1-16.el9_4.5
1.26.3-1.el10_0.8
1.20.1-24.el9_7.2
1.26.3-2.el10_1.1
1.20.1-10.el9_0.2
1.26.3-1.el10_0.3
1.20.1-14.el9_2.4
1.20.1-16.el9_4.4
1.20.1-24.el9_7.1
1.20.1-16.el9_4.3
1.20.1-22.el9_6.2
1.20.1-14.el9_2.1
1.20.1-10.el9_0.1
1.14.1-1.el7at
1.10.2-1.el7at
1.16.1-1.el8
1.16.1-1.el7
1.14.1-1.el7
1.10.2-1.el7
Vulnerabilities (15)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU137847 - Heap-based Buffer Overflow CVE-2026-42533 |
CWE-122 | High | 1.20.1-28.el9_8.6 | 16.07.2026 |
SB2026071606 SB20260721112 SB20260721113 and 10 more |
||
| #VU137846 - Use of Uninitialized Resource CVE-2026-60005 |
CWE-908 | High | 1.26.3-6.el10_2.6 | 16.07.2026 |
SB2026071606 SB20260721112 SB20260721113 and 10 more |
||
| #VU137845 - Use After Free CVE-2026-56434 |
CWE-416 | Medium | 1.26.3-6.el10_2.6 | 16.07.2026 |
SB2026071606 SB20260721112 SB20260721113 and 10 more |
||
| #VU134861 - Heap-based Buffer Overflow CVE-2026-42055 |
CWE-122 | High | 1.26.3-6.el10_2.5 | 18.06.2026 |
SB2026061844 SB2026061845 SB2026061846 and 13 more |
||
| #VU132220 - Heap-based Buffer Overflow CVE-2026-9256 |
CWE-122 | Critical | 1.20.1-28.el9_8.3, 1.26.3-6.el10_2.4 | 25.05.2026 |
SB2026052502 SB2026052504 SB2026052505 and 12 more |
||
| #VU131377 - Heap-based Buffer Overflow CVE-2026-42945 |
CWE-122 | Critical | 1.20.1-10.el9_0.4, 1.20.1-14.el9_2.6, 1.20.1-22.el9_6.6, 1.20.1-24.el9_7.3, 1.20.1-28.el9_8.2, 1.26.3-1.el10_0.9 | 14.05.2026 |
SB2026051401 SB2026051497 SB2026051498 and 27 more |
||
| #VU124480 - Integer overflow CVE-2026-27784 |
CWE-190 | High | 1.20.1-10.el9_0.3, 1.20.1-14.el9_2.5, 1.20.1-16.el9_4.5, 1.20.1-24.el9_7.2, 1.26.3-1.el10_0.8, 1.26.3-2.el10_1.1 | 25.03.2026 |
SB2026032585 SB20260325200 SB2026040801 and 17 more |
||
| #VU124478 - Heap-based Buffer Overflow CVE-2026-27654 |
CWE-122 | Medium | 1.20.1-10.el9_0.3, 1.20.1-14.el9_2.5, 1.20.1-16.el9_4.5, 1.20.1-24.el9_7.2, 1.26.3-1.el10_0.8, 1.26.3-2.el10_1.1 | 25.03.2026 |
SB2026032585 SB20260325200 SB2026033174 and 17 more |
||
| #VU124475 - Out-of-bounds write CVE-2026-32647 |
CWE-787 | High | 1.20.1-10.el9_0.3, 1.20.1-14.el9_2.5, 1.20.1-16.el9_4.5, 1.20.1-24.el9_7.2, 1.26.3-1.el10_0.8, 1.26.3-2.el10_1.1 | 25.03.2026 |
SB2026032585 SB20260325200 SB2026040801 and 17 more |
||
| #VU124473 - NULL Pointer Dereference CVE-2026-27651 |
CWE-476 | Medium | 1.20.1-10.el9_0.3, 1.20.1-14.el9_2.5, 1.20.1-16.el9_4.5, 1.20.1-24.el9_7.2, 1.26.3-1.el10_0.8, 1.26.3-2.el10_1.1 | 25.03.2026 |
SB2026032585 SB20260325200 SB2026040801 and 17 more |
||
| #VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2026-1642 |
CWE-349 | Medium | 1.20.1-10.el9_0.2, 1.20.1-14.el9_2.4, 1.20.1-16.el9_4.4, 1.20.1-24.el9_7.1, 1.26.3-1.el10_0.3 | 05.02.2026 |
SB2026020501 SB2026020505 SB2026020511 and 22 more |
||
| #VU96020 - Out-of-bounds read CVE-2024-7347 |
CWE-125 | Medium | 1.20.1-16.el9_4.3, 1.20.1-22.el9_6.2 | 14.08.2024 |
SB2024081481 SB2024081706 SB2024081707 and 25 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 1.20.1-10.el9_0.1, 1.20.1-14.el9_2.1 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 652 more |
||
| #VU68495 - Out-of-bounds read CVE-2022-41742 |
CWE-125 | Medium | 1.20.1-16.el9_4.3, 1.20.1-22.el9_6.2 | 19.10.2022 |
SB2022101941 SB2022111503 SB2022111601 and 34 more |
||
| #VU68494 - Out-of-bounds read CVE-2022-41741 |
CWE-125 | Medium | 1.20.1-16.el9_4.3, 1.20.1-22.el9_6.2 | 19.10.2022 |
SB2022101941 SB2022111503 SB2022111601 and 32 more |