Linux · Security advisory · May 19, 2026

ELSA-2026-18063: Security update for 10 packages

ELSA-2026-18063, released May 19, 2026, fixes 1 CVE across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
1
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.6805
99th percentile

Fixed package versions

ProductReleaseFixed in
nginxol 102:1.26.3-2.0.1.el10_1.2
nginx-all-modulesol 102:1.26.3-2.0.1.el10_1.2
nginx-coreol 102:1.26.3-2.0.1.el10_1.2
nginx-filesystemol 102:1.26.3-2.0.1.el10_1.2
nginx-mod-develol 102:1.26.3-2.0.1.el10_1.2
nginx-mod-http-image-filterol 102:1.26.3-2.0.1.el10_1.2
nginx-mod-http-perlol 102:1.26.3-2.0.1.el10_1.2
nginx-mod-http-xslt-filterol 102:1.26.3-2.0.1.el10_1.2
nginx-mod-mailol 102:1.26.3-2.0.1.el10_1.2
nginx-mod-streamol 102:1.26.3-2.0.1.el10_1.2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-42945 NGINX ngx_http_rewrite_module vulnerability 8.1 0.6805 None reported
Showing 1 to 1 of 1 1