Linux · Security advisory · June 25, 2026

ELSA-2026-29151: Security update for 10 packages

ELSA-2026-29151, released June 25, 2026, fixes 1 CVE across 10 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1086
95th percentile

Fixed package versions

ProductReleaseFixed in
nginxol 92:1.26.3-9.0.1.module+el9.8.0+90931+68e8e4c5.1
nginx-all-modulesol 92:1.26.3-9.0.1.module+el9.8.0+90931+68e8e4c5.1
nginx-coreol 92:1.26.3-9.0.1.module+el9.8.0+90931+68e8e4c5.1
nginx-filesystemol 92:1.26.3-9.0.1.module+el9.8.0+90931+68e8e4c5.1
nginx-mod-develol 92:1.26.3-9.0.1.module+el9.8.0+90931+68e8e4c5.1
nginx-mod-http-image-filterol 92:1.26.3-9.0.1.module+el9.8.0+90931+68e8e4c5.1
nginx-mod-http-perlol 92:1.26.3-9.0.1.module+el9.8.0+90931+68e8e4c5.1
nginx-mod-http-xslt-filterol 92:1.26.3-9.0.1.module+el9.8.0+90931+68e8e4c5.1
nginx-mod-mailol 92:1.26.3-9.0.1.module+el9.8.0+90931+68e8e4c5.1
nginx-mod-streamol 92:1.26.3-9.0.1.module+el9.8.0+90931+68e8e4c5.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-9256 NGINX ngx_http_rewrite_module vulnerability 8.1 0.1086 None reported
Showing 1 to 1 of 1 1