Linux
nginx security updates
Patch Radar has 180 security fixes for nginx, closing 50 CVEs, 1 of which is being exploited. The newest is nginx 1.24.0-2ubuntu7.19 (1.24.0-2ubuntu7.19), released October 27, 2026.
1 exploited CVEs
Latest version
n/a
Release date not known
Security fixes
180
On record in Patch Radar
CVEs
50
Closed by those fixes
Exploited
1
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| Urgent | nginx 1.24.0-2ubuntu7.19 | Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.19 | 4 | Oct 27, 2026 | |
| Urgent | nginx 1.18.0-6ubuntu14.22 | Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.22 | 3 | Oct 27, 2026 | |
| Urgent | DEBIAN-CVE-2026-93479 | Debian 14 | 1.30.4-8 | 1 | Oct 18, 2026 | |
| Urgent | DEBIAN-CVE-2026-93479 | Debian 13.5 (trixie) | 1.26.3-3+deb13u10 | 1 | Oct 18, 2026 | |
| High | DEBIAN-CVE-2026-15176 | Debian 14 | 1.30.4-8 | 1 | Oct 18, 2026 | |
| High | DEBIAN-CVE-2026-15176 | Debian 13.5 (trixie) | 1.26.3-3+deb13u10 | 1 | Oct 18, 2026 | |
| High | DEBIAN-CVE-2026-97205 | Debian 14 | 1.30.4-8 | 1 | Oct 18, 2026 | |
| High | DEBIAN-CVE-2026-97205 | Debian 13.5 (trixie) | 1.26.3-3+deb13u10 | 1 | Oct 18, 2026 | |
| Routine | DEBIAN-CVE-2026-95101 | Debian 14 | 1.30.4-8 | 1 | Oct 18, 2026 | |
| Routine | DEBIAN-CVE-2026-95101 | Debian 13.5 (trixie) | 1.26.3-3+deb13u10 | 1 | Oct 18, 2026 | |
| Routine | DEBIAN-CVE-2026-97629 | Debian 14 | 1.30.4-8 | 1 | Oct 18, 2026 | |
| Routine | DEBIAN-CVE-2026-97629 | Debian 13.5 (trixie) | 1.26.3-3+deb13u10 | 1 | Oct 18, 2026 | |
| Routine | DEBIAN-CVE-2026-90439 | Debian 14 | 1.30.4-7 | 1 | Sep 20, 2026 | |
| Urgent | RHSA-2026:67315 | RHEL 8 | 1:1.24.0-3.module+el8.10.0+24848+0300f002.5 | 1 | Sep 19, 2026 | |
| Urgent | RHSA-2026:67308 | RHEL 9 | 1:1.24.0-7.module+el9.8.0+24846+e7eec568.5 | 1 | Sep 13, 2026 | |
| High | RHSA-2026:59496 | RHEL 9 | 2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3 | 2 | Aug 28, 2026 | |
| High | RHSA-2026:59216 | RHEL 8 | 1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4 | 2 | Aug 28, 2026 | |
| High | nginx 1.18.0-6ubuntu14.17 | Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.17 | 2 | Jul 23, 2026 | |
| High | nginx 1.24.0-2ubuntu7.14 | Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.14 | 2 | Jul 23, 2026 | |
| High | DEBIAN-CVE-2026-60005 | Debian 13.5 (trixie) | 1.26.3-3+deb13u8 | 1 | Jul 21, 2026 | |
| High | DEBIAN-CVE-2026-60005 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u10 | 1 | Jul 21, 2026 | |
| High | DEBIAN-CVE-2026-60005 | Debian 14 | 1.30.1-7 | 1 | Jul 21, 2026 | |
| Routine | DEBIAN-CVE-2026-56434 | Debian 13.5 (trixie) | 1.26.3-3+deb13u8 | 1 | Jul 21, 2026 | |
| Routine | DEBIAN-CVE-2026-56434 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u10 | 1 | Jul 21, 2026 | |
| Routine | DEBIAN-CVE-2026-56434 | Debian 14 | 1.30.1-7 | 1 | Jul 21, 2026 | |
| Urgent | nginx 1.18.0-6ubuntu14.21 | Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.21 | 1 | Jul 15, 2026 | |
| Urgent | nginx 1.24.0-2ubuntu7.18 | Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.18 | 1 | Jul 15, 2026 | |
| Urgent | DEBIAN-CVE-2026-42533 | Debian 14 | 1.30.4-3 | 1 | Jul 15, 2026 | |
| Urgent | DEBIAN-CVE-2026-42533 | Debian 13.5 (trixie) | 1.26.3-3+deb13u8 | 1 | Jul 15, 2026 | |
| Urgent | DEBIAN-CVE-2026-42533 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u10 | 1 | Jul 15, 2026 | |
| High | RHSA-2026:59220 | RHEL 10 | 1.26.3-6.el10_2.6 | 2 | Jul 15, 2026 | |
| Urgent | RHSA-2026:67314 | RHEL 10 | 1.26.3-6.el10_2.7 | 1 | Jul 15, 2026 | |
| High | RHSA-2026:38847 | RHEL 8 | 1:1.24.0-3.module+el8.10.0+24503+61c7c092.3 | 1 | Jul 13, 2026 | |
| High | RHSA-2026:36364 | RHEL 10 | 1.26.3-6.el10_2.5 | 1 | Jul 8, 2026 | |
| High | RHSA-2026:36639 | RHEL 9 | 2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2 | 1 | Jul 8, 2026 | |
| High | RHSA-2026:28921 | RHEL 8 | 1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2 | 1 | Jun 25, 2026 | |
| High | DEBIAN-CVE-2026-42055 | Debian 14 | 1.30.1-5 | 1 | Jun 25, 2026 | |
| High | DEBIAN-CVE-2026-42055 | Debian 13.5 (trixie) | 1.26.3-3+deb13u7 | 1 | Jun 25, 2026 | |
| High | DEBIAN-CVE-2026-42055 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u9 | 1 | Jun 25, 2026 | |
| Routine | DEBIAN-CVE-2026-48142 | Debian 14 | 1.30.1-5 | 1 | Jun 25, 2026 | |
| Routine | DEBIAN-CVE-2026-48142 | Debian 13.5 (trixie) | 1.26.3-3+deb13u7 | 1 | Jun 25, 2026 | |
| Routine | DEBIAN-CVE-2026-48142 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u9 | 1 | Jun 25, 2026 | |
| High | RHSA-2026:29151 | RHEL 9 | 2:1.26.3-9.module+el9.8.0+24374+c0e15309.1 | 1 | Jun 24, 2026 | |
| High | nginx 1.28.0-6ubuntu1.7 | Ubuntu 25.10 (questing) | 1.28.0-6ubuntu1.7 | 1 | Jun 24, 2026 | |
| High | nginx 1.28.0-6ubuntu1.8 | Ubuntu 25.10 (questing) | 1.28.0-6ubuntu1.8 | 2 | Jun 24, 2026 | |
| High | nginx 1.24.0-2ubuntu7.12 | Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.12 | 1 | Jun 24, 2026 | |
| High | nginx 1.24.0-2ubuntu7.13 | Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.13 | 2 | Jun 24, 2026 | |
| High | nginx 1.18.0-6ubuntu14.15 | Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.15 | 1 | Jun 24, 2026 | |
| High | nginx 1.18.0-6ubuntu14.16 | Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.16 | 2 | Jun 24, 2026 | |
| High | nginx 1.14.0-0ubuntu1.11+esm4 | Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.11+esm4 | 1 | Jun 2, 2026 | |
| High | nginx 1.18.0-0ubuntu1.7+esm3 | Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7+esm3 | 1 | Jun 2, 2026 | |
| Urgent | RHSA-2026:17790 | RHEL 10 | 1.26.3-1.el10_0.9 | 1 | May 27, 2026 | |
| Urgent | RHSA-2026:19374 | RHEL 9 | 2:1.20.1-28.el9_8.2 | 1 | May 27, 2026 | |
| Urgent | RHSA-2026:18041 | RHEL 8 | 1:1.24.0-3.module+el8.10.0+24290+dc7f88b5.1 | 1 | May 27, 2026 | |
| Urgent | nginx 1.28.0-6ubuntu1.3 | Ubuntu 25.10 (questing) | 1.28.0-6ubuntu1.3 | 1 | May 27, 2026 | |
| Urgent | nginx 1.18.0-6ubuntu14.11 | Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.11 | 1 | May 27, 2026 | |
| Urgent | nginx 1.24.0-2ubuntu7.8 | Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.8 | 1 | May 27, 2026 | |
| Urgent | DEBIAN-CVE-2026-42945 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u7 | 1 | May 27, 2026 | |
| Urgent | DEBIAN-CVE-2026-42945 | Debian 13.5 (trixie) | 1.26.3-3+deb13u5 | 1 | May 27, 2026 | |
| Urgent | DEBIAN-CVE-2026-42945 | Debian 14 | 1.30.0-3 | 1 | May 27, 2026 | |
| High | DEBIAN-CVE-2026-9256 | Debian 14 | 1.30.1-3 | 1 | May 27, 2026 | |
| High | DEBIAN-CVE-2026-9256 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u8 | 1 | May 27, 2026 | |
| High | DEBIAN-CVE-2026-9256 | Debian 13.5 (trixie) | 1.26.3-3+deb13u6 | 1 | May 27, 2026 | |
| High | DEBIAN-CVE-2026-42946 | Debian 13.5 (trixie) | 1.26.3-3+deb13u6 | 1 | May 27, 2026 | |
| High | DEBIAN-CVE-2026-42946 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u8 | 1 | May 27, 2026 | |
| High | DEBIAN-CVE-2026-42946 | Debian 14 | 1.30.0-4 | 1 | May 27, 2026 | |
| Routine | DEBIAN-CVE-2026-42934 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u7 | 1 | May 27, 2026 | |
| Routine | DEBIAN-CVE-2026-42934 | Debian 13.5 (trixie) | 1.26.3-3+deb13u5 | 1 | May 27, 2026 | |
| Routine | DEBIAN-CVE-2026-42934 | Debian 14 | 1.30.0-4 | 1 | May 27, 2026 | |
| Routine | DEBIAN-CVE-2026-40701 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u7 | 1 | May 27, 2026 | |
| Routine | DEBIAN-CVE-2026-40701 | Debian 13.5 (trixie) | 1.26.3-3+deb13u5 | 1 | May 27, 2026 | |
| Routine | DEBIAN-CVE-2026-40701 | Debian 14 | 1.30.0-4 | 1 | May 27, 2026 | |
| Routine | DEBIAN-CVE-2026-40460 | Debian 13.5 (trixie) | 1.26.3-3+deb13u5 | 1 | May 27, 2026 | |
| Routine | DEBIAN-CVE-2026-40460 | Debian 14 | 1.30.0-4 | 1 | May 27, 2026 | |
| Routine | DEBIAN-CVE-2026-42926 | Debian 14 | 1.30.0-4 | 1 | May 27, 2026 | |
| High | RHSA-2026:29874 | RHEL 10 | 1.26.3-6.el10_2.4 | 1 | May 22, 2026 | |
| Urgent | nginx 1.14.0-0ubuntu1.11+esm2 | Ubuntu 18.04.6 LTS (bionic) | 1.14.0-0ubuntu1.11+esm2 | 12 | May 22, 2026 | |
| Urgent | nginx 1.18.0-0ubuntu1.7+esm1 | Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7+esm1 | 12 | May 22, 2026 | |
| High | nginx 1.28.0-6ubuntu1.4 | Ubuntu 25.10 (questing) | 1.28.0-6ubuntu1.4 | 5 | May 22, 2026 | |
| High | nginx 1.18.0-6ubuntu14.12 | Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.12 | 4 | May 22, 2026 | |
| High | nginx 1.24.0-2ubuntu7.9 | Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.9 | 4 | May 22, 2026 | |
| High | RHSA-2026:13634 | RHEL 10 | 1.26.3-1.el10_0.8 | 4 | Apr 15, 2026 | |
| High | RHSA-2026:7343 | RHEL 9 | 2:1.26.3-2.module+el9.7.0+24173+4204b761.1 | 4 | Apr 15, 2026 | |
| High | RHSA-2026:6907 | RHEL 8 | 1:1.24.0-3.module+el8.10.0+24155+8a5ade52 | 4 | Apr 15, 2026 | |
| Routine | RHSA-2026:5581 | RHEL 8 | 1:1.24.0-2.module+el8.10.0+24013+f603d2af | 1 | Apr 15, 2026 | |
| High | DEBIAN-CVE-2026-32647 | Debian 13.5 (trixie) | 1.26.3-3+deb13u3 | 1 | Mar 24, 2026 | |
| High | DEBIAN-CVE-2026-32647 | Debian 14 | 1.28.3-1 | 1 | Mar 24, 2026 | |
| High | DEBIAN-CVE-2026-32647 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u5 | 1 | Mar 24, 2026 | |
| High | DEBIAN-CVE-2026-27654 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u5 | 1 | Mar 24, 2026 | |
| High | DEBIAN-CVE-2026-27654 | Debian 13.5 (trixie) | 1.26.3-3+deb13u3 | 1 | Mar 24, 2026 | |
| High | DEBIAN-CVE-2026-27654 | Debian 14 | 1.28.3-1 | 1 | Mar 24, 2026 | |
| High | DEBIAN-CVE-2026-27784 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u5 | 1 | Mar 24, 2026 | |
| High | DEBIAN-CVE-2026-27784 | Debian 13.5 (trixie) | 1.26.3-3+deb13u3 | 1 | Mar 24, 2026 | |
| High | DEBIAN-CVE-2026-27784 | Debian 14 | 1.28.3-1 | 1 | Mar 24, 2026 | |
| Routine | DEBIAN-CVE-2026-28753 | Debian 14 | 1.28.3-1 | 1 | Mar 24, 2026 | |
| Routine | DEBIAN-CVE-2026-28753 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u5 | 1 | Mar 24, 2026 | |
| Routine | DEBIAN-CVE-2026-28753 | Debian 13.5 (trixie) | 1.26.3-3+deb13u3 | 1 | Mar 24, 2026 | |
| Routine | DEBIAN-CVE-2026-28755 | Debian 14 | 1.28.3-2 | 1 | Mar 24, 2026 | |
| High | DEBIAN-CVE-2026-27651 | Debian 12.15 (bookworm) | 1.22.1-9+deb12u5 | 1 | Mar 24, 2026 | |
| High | DEBIAN-CVE-2026-27651 | Debian 13.5 (trixie) | 1.26.3-3+deb13u3 | 1 | Mar 24, 2026 |
Showing the newest 100 of 180 fixes.