Nginx Multiple Vulnerabilities

Release Date: 22 Jun 2026

RISK: Medium Risk

TYPE: Servers - Web Servers

Multiple vulnerabilities were identified in Nginx. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, denial of service condition and sensitive information disclosure on the targeted system.

---

Impact

• Denial of Service
• Remote Code Execution
• Information Disclosure

---

System / Technologies affected

• Nginx version prior to nginx-1.30.3 stable
• Nginx version prior to nginx-1.31.2 mainline

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://nginx.org/2026.html

---

Vulnerability Identifier

• CVE-2026-42055
• CVE-2026-42530
• CVE-2026-48142

---

Source

• https://nginx.org/2026.html

---

Related Link

• https://nginx.org/2026.html