kritik
CVE-2026-42945
nginx: NGINX: Arbitrary Code Execution Vulnerability
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
Red Hat8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Bitnami9.2CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: Red Hat, AlmaLinux, Azure Linux, Bitnami, Oracle, Rocky Linux. Daha düşük diyenler: Amazon (yüksek), Photon OS (yüksek), Ubuntu (yüksek).
Açıklama
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond its control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alma 10 | nginx, nginx-all-modules, nginx-core ve 7 tane daha | 2:1.26.3-6.el10_2.3 |
| alma 8 | nginx:1.24::nginx, nginx:1.24::nginx-all-modules, nginx:1.24::nginx-filesystem ve 6 tane daha | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 9 | nginx, nginx-all-modules, nginx-core ve 11 tane daha | 2:1.20.1-28.el9_8.2.alma.1 ve 2 tane daha |
| Azure Linux 3.0 | nginx | 0:1.28.3-2.azl3 |
| bitnami::Bitnami Vulnerability Database | nginx, nginx-gateway | 1.30.1 |
| Oracle Linux 8 | nginx, nginx-all-modules, nginx-filesystem ve 6 tane daha | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 9 | nginx, nginx-all-modules, nginx-core ve 7 tane daha | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| rocky 10 | nginx, nginx-all-modules, nginx-core ve 6 tane daha | 2:1.26.3-6.el10_2.3 |
| rocky 8 | nginx:1.24::nginx, nginx:1.24::nginx-all-modules, nginx:1.24::nginx-filesystem ve 6 tane daha | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 9 | nginx, nginx-all-modules, nginx-core ve 26 tane daha | 2:1.20.1-28.el9_8.2.rocky.0.1 ve 2 tane daha |
| alpine 3.21 | nginx | 1.26.3-r1 |
| alpine 3.22 | nginx | 1.28.3-r1 |
43 kaynaktaki 196 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alma 10 | nginx | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-all-modules | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-core | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-filesystem | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-devel | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-http-image-filter | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-http-perl | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-http-xslt-filter | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-mail | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-stream | 2:1.26.3-6.el10_2.3 |
| alma 8 | nginx:1.24::nginx | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-all-modules | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-filesystem | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-devel | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-http-image-filter | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-http-perl | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-http-xslt-filter | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-mail | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-stream | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 9 | nginx | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-all-modules | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-core | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-filesystem | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-devel | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-http-image-filter | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-http-perl | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-http-xslt-filter | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-mail | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-stream | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx:1.24::nginx-all-modules | 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1 |
| alma 9 | nginx:1.24::nginx-filesystem | 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1 |
| alma 9 | nginx:1.26::nginx-all-modules | 2:1.26.3-9.module_el9.8.0+247+aa936373 |
| alma 9 | nginx:1.26::nginx-filesystem | 2:1.26.3-9.module_el9.8.0+247+aa936373 |
| Azure Linux 3.0 | nginx | 0:1.28.3-2.azl3 |
| bitnami::Bitnami Vulnerability Database | nginx | 1.30.1 |
| bitnami::Bitnami Vulnerability Database | nginx-gateway | 1.30.1 |
| Oracle Linux 8 | nginx | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-all-modules | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-filesystem | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-devel | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-http-image-filter | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-http-perl | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-http-xslt-filter | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-mail | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-stream | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 9 | nginx | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-all-modules | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-core | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-filesystem | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-devel | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-http-image-filter | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-http-perl | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-http-xslt-filter | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-mail | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-stream | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| rocky 10 | nginx | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-all-modules | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-core | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-filesystem | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-http-image-filter | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-http-perl | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-http-xslt-filter | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-mail | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-stream | 2:1.26.3-6.el10_2.3 |
| rocky 8 | nginx:1.24::nginx | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-all-modules | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-filesystem | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-devel | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-http-image-filter | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-http-perl | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-http-xslt-filter | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-mail | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-stream | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 9 | nginx | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-all-modules | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-core | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-filesystem | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-http-image-filter | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-http-perl | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-http-xslt-filter | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-mail | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-stream | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-all-modules | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-core | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-filesystem | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-devel | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-http-image-filter | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-http-perl | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-http-xslt-filter | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-mail | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-stream | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.26::nginx | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-all-modules | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-core | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-filesystem | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-devel | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-http-image-filter | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-http-perl | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-http-xslt-filter | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-mail | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-stream | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| alpine 3.21 | nginx | 1.26.3-r1 |
| alpine 3.22 | nginx | 1.28.3-r1 |
| alpine 3.23 | nginx | 1.28.3-r1 |
| alpine 3.24 | nginx | 1.30.1-r0 |
| alpine edge | nginx | 1.30.1-r0 |
| amazon linux 2023 | nginx | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-all-modules | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-core | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-core-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-debugsource | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-filesystem | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-devel | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-image-filter | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-image-filter-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-perl | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-perl-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-xslt-filter | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-xslt-filter-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-mail | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-mail-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-stream | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-stream-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| chainguard | ingress-nginx-controller-1.13 | 1.13.9-r9 |
| chainguard | ingress-nginx-controller-1.14 | 1.14.5-r12 |
| chainguard | ingress-nginx-controller-1.15 | 1.15.5-r1 |
| chainguard | ingress-nginx-controller-fips-1.13 | 1.13.9-r9 |
| chainguard | ingress-nginx-controller-fips-1.14 | 1.14.5-r9 |
| chainguard | ingress-nginx-controller-fips-1.15 | 1.15.5-r1 |
| chainguard | nginx-mainline | 1.31.0-r0 |
| chainguard | nginx-stable | 1.30.1-r0 |
| debian 11 | nginx | 1.18.0-6.1+deb11u6 |
| debian 12 | nginx | 1.22.1-9+deb12u7 |
| debian 13 | nginx | 1.26.3-3+deb13u5 |
| debian 14 | nginx | 1.30.0-3 |
| echo | nginx | 1.22.1-9+deb12u7 |
| echo | nginx-1.30 | 1.30.1 |
| echo | nginx-1.31 | 1.31.0 |
| minimos | nginx-1.30 | 1.30.1-r0 |
| Photon OS 4.0 | nginx | 1.26.3-3.ph4 |
| rapidfort alma 9 | nginx-all-modules | 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1 |
| rapidfort alma 9 | nginx-filesystem | 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1 |
| rapidfort alpine 3.20 | nginx | 1.26.3-r1, 1.28.3-r1 |
| rapidfort alpine 3.21 | nginx | 1.26.3-r1, 1.28.3-r1 |
| rapidfort alpine 3.22 | nginx | 1.26.3-r1, 1.28.3-r1 |
| rapidfort alpine 3.23 | nginx | 1.28.3-r1 |
| rapidfort alpine 3.24 | nginx | 1.28.3-r1, 1.30.1-r0 |
| rapidfort debian 12 | nginx | 0:1.26.3-3+deb13u5, 0:1.30.0-3 |
| rapidfort debian 12 | rf-nginx | 0:1.29.4-1~noble |
| rapidfort debian 13 | nginx | 0:1.26.3-3+deb13u5, 0:1.30.0-3 |
| rapidfort debian 13 | rf-nginx | 0:1.29.4-1~noble |
| rapidfort fedora 41 | nginx | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | nginx-core | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | nginx-filesystem | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | rf-nginx | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | rf-nginx-core | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | rf-nginx-filesystem | 2:1.28.0-3.fc41 |
| rapidfort fedora 43 | nginx | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-all-modules | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-core | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-filesystem | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-brotli | 1.0.0~rc-9.fc43 |
| rapidfort fedora 43 | nginx-mod-devel | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-fancyindex | 0.6.0-4.fc43 |
| rapidfort fedora 43 | nginx-mod-headers-more | 0.39-9.fc43 |
| rapidfort fedora 43 | nginx-mod-http-image-filter | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-http-perl | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-http-xslt-filter | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-mail | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-modsecurity | 1.0.4-10.fc43 |
| rapidfort fedora 43 | nginx-mod-naxsi | 1.6-17.fc43 |
| rapidfort fedora 43 | nginx-mod-stream | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-vts | 0.2.4-9.fc43 |
| rapidfort fedora 43 | rf-nginx | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | rf-nginx-core | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | rf-nginx-filesystem | 2:1.30.1-1.fc43 |
| rapidfort rocky 9 | nginx | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-core | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-http-image-filter | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-http-perl | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-http-xslt-filter | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-mail | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-stream | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| root.io debian 12 | rootio-nginx | 1.22.1-9+deb12u7 |
| ubuntu 18.04-ESM | nginx | 1.14.0-0ubuntu1.11+esm2 |
| ubuntu 20.04-ESM | nginx | 1.18.0-0ubuntu1.7+esm1 |
| ubuntu 22.04 | nginx | 1.18.0-6ubuntu14.11 |
| ubuntu 24.04 | nginx | 1.24.0-2ubuntu7.8 |
| ubuntu 25.10 | nginx | 1.28.0-6ubuntu1.3 |
| ubuntu 26.04 | nginx | 1.28.3-2ubuntu1.1 |
| wolfi | ingress-nginx-controller-1.14 | 1.14.5-r12 |
| wolfi | ingress-nginx-controller-1.15 | 1.15.5-r1 |
| wolfi | nginx-mainline | 1.31.0-r0 |
| wolfi | nginx-stable | 1.30.1-r0 |
Referanslar
- https://access.redhat.com/errata/RHSA-2026:17417
- https://access.redhat.com/errata/RHSA-2026:17751
- https://access.redhat.com/errata/RHSA-2026:17752
- https://access.redhat.com/errata/RHSA-2026:17753
- https://access.redhat.com/errata/RHSA-2026:17790
- https://access.redhat.com/errata/RHSA-2026:17791
- https://access.redhat.com/errata/RHSA-2026:17792
- https://access.redhat.com/errata/RHSA-2026:17793
48 referansın hepsi
- https://access.redhat.com/errata/RHSA-2026:17794
- https://access.redhat.com/errata/RHSA-2026:18029
- https://access.redhat.com/errata/RHSA-2026:18041
- https://access.redhat.com/errata/RHSA-2026:18063
- https://access.redhat.com/errata/RHSA-2026:19159
- https://access.redhat.com/errata/RHSA-2026:19371
- https://access.redhat.com/errata/RHSA-2026:19372
- https://access.redhat.com/errata/RHSA-2026:19374
- https://access.redhat.com/errata/RHSA-2026:20442
- https://access.redhat.com/errata/RHSA-2026:20444
- https://access.redhat.com/errata/RHSA-2026:21275
- https://access.redhat.com/errata/RHSA-2026:22382
- https://access.redhat.com/errata/RHSA-2026:22383
- https://access.redhat.com/errata/RHSA-2026:22388
- https://access.redhat.com/errata/RHSA-2026:22389
- https://access.redhat.com/errata/RHSA-2026:22390
- https://access.redhat.com/errata/RHSA-2026:22393
- https://access.redhat.com/errata/RHSA-2026:22394
- https://access.redhat.com/errata/RHSA-2026:22396
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/security/cve/CVE-2026-42945
- https://bugzilla.redhat.com/2477116
- https://bugzilla.redhat.com/show_bug.cgi?id=2477116
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42945
- https://depthfirst.com/nginx-rift
- https://depthfirst.com/research/nginx-rift-achieving-nginx-rce-via-an-18-year-old-vulnerability
- https://errata.almalinux.org/9/ALSA-2026-19374.html
- https://errata.rockylinux.org/RLSA-2026:19374
- https://github.com/DepthFirstDisclosures/Nginx-Rift
- https://linux.oracle.com/cve/CVE-2026-42945.html
- https://linux.oracle.com/errata/ELSA-2026-19374.html
- https://my.f5.com/manage/s/article/K000161019
- https://nginx.org/en/security_advisories.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-42945
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42945.json
- https://ubuntu.com/security/notices/USN-8271-1
- https://ubuntu.com/security/notices/USN-8375-1
- https://www.cve.org/CVERecord?id=CVE-2026-42945
- https://www.openwall.com/lists/oss-security/2026/05/13/7