1464 lines
66 KiB
JSON
1464 lines
66 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.2",
|
||
"cveMetadata": {
|
||
"cveId": "CVE-2026-42945",
|
||
"assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
|
||
"state": "PUBLISHED",
|
||
"assignerShortName": "f5",
|
||
"dateReserved": "2026-04-30T23:04:27.955Z",
|
||
"datePublished": "2026-05-13T14:12:43.971Z",
|
||
"dateUpdated": "2026-09-10T12:04:53.533Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"providerMetadata": {
|
||
"orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
|
||
"shortName": "f5",
|
||
"dateUpdated": "2026-05-21T18:28:55.718Z"
|
||
},
|
||
"title": "NGINX ngx_http_rewrite_module vulnerability",
|
||
"datePublic": "2026-05-13T14:00:00.000Z",
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"cweId": "CWE-122",
|
||
"description": "CWE-122 Heap-based Buffer Overflow.",
|
||
"type": "CWE"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"affected": [
|
||
{
|
||
"vendor": "F5",
|
||
"product": "NGINX Plus",
|
||
"modules": [
|
||
"ngx_http_rewrite_module"
|
||
],
|
||
"versions": [
|
||
{
|
||
"status": "unaffected",
|
||
"version": "R37",
|
||
"lessThan": "*",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "R36",
|
||
"lessThan": "R36 P4",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "R32",
|
||
"lessThan": "R32 P6",
|
||
"versionType": "custom"
|
||
}
|
||
],
|
||
"defaultStatus": "unknown"
|
||
},
|
||
{
|
||
"vendor": "F5",
|
||
"product": "NGINX Open Source",
|
||
"modules": [
|
||
"ngx_http_rewrite_module"
|
||
],
|
||
"versions": [
|
||
{
|
||
"status": "unaffected",
|
||
"version": "1.31.0",
|
||
"lessThan": "*",
|
||
"versionType": "semver"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "0.6.27",
|
||
"lessThan": "1.30.1",
|
||
"versionType": "semver"
|
||
}
|
||
],
|
||
"defaultStatus": "unaffected"
|
||
}
|
||
],
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond its control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
|
||
"supportingMedia": [
|
||
{
|
||
"type": "text/html",
|
||
"base64": false,
|
||
"value": "<span style=\"background-color: rgb(255, 255, 255);\">NGINX Plus and NGINX Open Source have a vulnerability in the </span><strong>ngx_http_rewrite_module</strong><span style=\"background-color: rgb(255, 255, 255);\"> module. This vulnerability exists when the </span><strong>rewrite</strong><span style=\"background-color: rgb(255, 255, 255);\"> directive is followed by a </span><strong>rewrite</strong><span style=\"background-color: rgb(255, 255, 255);\">, </span><strong>if</strong><span style=\"background-color: rgb(255, 255, 255);\">, or </span><strong>set</strong><span style=\"background-color: rgb(255, 255, 255);\"> directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond its control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.</span> Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://my.f5.com/manage/s/article/K000161019",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"patch"
|
||
]
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"format": "CVSS",
|
||
"scenarios": [
|
||
{
|
||
"lang": "en",
|
||
"value": "GENERAL"
|
||
}
|
||
],
|
||
"cvssV3_1": {
|
||
"version": "3.1",
|
||
"attackVector": "NETWORK",
|
||
"attackComplexity": "HIGH",
|
||
"privilegesRequired": "NONE",
|
||
"userInteraction": "NONE",
|
||
"scope": "UNCHANGED",
|
||
"confidentialityImpact": "HIGH",
|
||
"integrityImpact": "HIGH",
|
||
"availabilityImpact": "HIGH",
|
||
"baseSeverity": "HIGH",
|
||
"baseScore": 8.1,
|
||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
|
||
}
|
||
},
|
||
{
|
||
"format": "CVSS",
|
||
"scenarios": [
|
||
{
|
||
"lang": "en",
|
||
"value": "GENERAL"
|
||
}
|
||
],
|
||
"cvssV4_0": {
|
||
"version": "4.0",
|
||
"attackVector": "NETWORK",
|
||
"attackComplexity": "HIGH",
|
||
"attackRequirements": "NONE",
|
||
"privilegesRequired": "NONE",
|
||
"userInteraction": "NONE",
|
||
"vulnConfidentialityImpact": "HIGH",
|
||
"subConfidentialityImpact": "NONE",
|
||
"vulnIntegrityImpact": "HIGH",
|
||
"subIntegrityImpact": "NONE",
|
||
"vulnAvailabilityImpact": "HIGH",
|
||
"subAvailabilityImpact": "NONE",
|
||
"Safety": "NOT_DEFINED",
|
||
"Automatable": "NOT_DEFINED",
|
||
"Recovery": "NOT_DEFINED",
|
||
"valueDensity": "NOT_DEFINED",
|
||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||
"providerUrgency": "NOT_DEFINED",
|
||
"baseSeverity": "CRITICAL",
|
||
"baseScore": 9.2,
|
||
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
|
||
}
|
||
}
|
||
],
|
||
"credits": [
|
||
{
|
||
"lang": "en",
|
||
"value": "F5 acknowledges Zhenpeng (Leo) Lin of depthfirst for bringing this issue to our attention and following the highest standards of coordinated disclosure.",
|
||
"type": "finder"
|
||
}
|
||
],
|
||
"source": {
|
||
"discovery": "EXTERNAL"
|
||
},
|
||
"x_generator": {
|
||
"engine": "F5 SIRTBot v1.0"
|
||
}
|
||
},
|
||
"adp": [
|
||
{
|
||
"metrics": [
|
||
{
|
||
"other": {
|
||
"type": "ssvc",
|
||
"content": {
|
||
"timestamp": "2026-05-13T00:00:00+00:00",
|
||
"options": [
|
||
{
|
||
"Exploitation": "none"
|
||
},
|
||
{
|
||
"Automatable": "no"
|
||
},
|
||
{
|
||
"Technical Impact": "total"
|
||
}
|
||
],
|
||
"role": "CISA Coordinator",
|
||
"version": "2.0.3",
|
||
"id": "CVE-2026-42945"
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"title": "CISA ADP Vulnrichment",
|
||
"providerMetadata": {
|
||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||
"shortName": "CISA-ADP",
|
||
"dateUpdated": "2026-05-14T03:56:26.480Z"
|
||
}
|
||
},
|
||
{
|
||
"providerMetadata": {
|
||
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
||
"shortName": "CVE",
|
||
"dateUpdated": "2026-05-14T18:54:21.853Z"
|
||
},
|
||
"references": [
|
||
{
|
||
"url": "https://depthfirst.com/nginx-rift"
|
||
},
|
||
{
|
||
"url": "https://github.com/DepthFirstDisclosures/Nginx-Rift"
|
||
}
|
||
],
|
||
"title": "CVE Program Container",
|
||
"x_generator": {
|
||
"engine": "ADPogram 0.0.1"
|
||
}
|
||
},
|
||
{
|
||
"affected": [
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/o:redhat:enterprise_linux:10.1",
|
||
"cpe:/o:redhat:enterprise_linux:10.2"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx",
|
||
"product": "Red Hat Enterprise Linux 10",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "2:1.26.3-2.el10_1.2",
|
||
"versionType": "rpm"
|
||
},
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "2:1.26.3-6.el10_2.3",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/o:redhat:enterprise_linux_eus:10.0"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx",
|
||
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "2:1.26.3-1.el10_0.9",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:enterprise_linux:8"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx:1.24",
|
||
"product": "Red Hat Enterprise Linux 8",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "8100020260514165201.489197e6",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:enterprise_linux:9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx",
|
||
"product": "Red Hat Enterprise Linux 9",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "2:1.20.1-24.el9_7.3",
|
||
"versionType": "rpm"
|
||
},
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "2:1.20.1-28.el9_8.2",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:enterprise_linux:9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx:1.24",
|
||
"product": "Red Hat Enterprise Linux 9",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "9080020260514160836.9",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:enterprise_linux:9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx:1.26",
|
||
"product": "Red Hat Enterprise Linux 9",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "9080020260514152324.9",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_e4s:9.0"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx",
|
||
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1:1.20.1-10.el9_0.4",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_e4s:9.2"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx",
|
||
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1:1.20.1-14.el9_2.6",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_eus:9.4"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx",
|
||
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1:1.20.1-16.el9_4.6",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_eus:9.4"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx:1.24",
|
||
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "9040020260514192210.9",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_eus:9.6"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx:1.24",
|
||
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "9060020260514175739.9",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_eus:9.6"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx:1.26",
|
||
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "9060020260514170123.9",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_eus:9.6"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx",
|
||
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "2:1.20.1-22.el9_6.6",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:hummingbird:1"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "nginx-main",
|
||
"product": "Red Hat Hardened Images",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1.30.1-1.hum1",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.14::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/ocs-client-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.14",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779972138",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.14::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.14",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779972283",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.14::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-multicluster-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.14",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779972179",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.15::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/ocs-client-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.15",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779967811",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.15::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.15",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779967813",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.15::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-multicluster-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.15",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779968303",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/ocs-client-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.16",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779959318",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.16",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779959527",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-multicluster-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.16",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779959592",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/ocs-client-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.17",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779952245",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.17",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779952279",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-multicluster-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.17",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779952463",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/ocs-client-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.18",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779881302",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.18",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779881608",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-multicluster-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.18",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779881122",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/ocs-client-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.19",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779881012",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.19",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779881008",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-multicluster-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.19",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779881332",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/ocs-client-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.20",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779879463",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.20",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779877770",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-multicluster-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.20",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779881377",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/ocs-client-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.21",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779946521",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.21",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779946525",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "odf4/odf-multicluster-console-rhel9",
|
||
"product": "Red Hat Openshift Data Foundation 4.21",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779946691",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:satellite:6.18::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "satellite/iop-gateway-rhel9",
|
||
"product": "Red Hat Satellite 6.18",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779706745",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:satellite:6.19::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "satellite/iop-gateway-rhel9",
|
||
"product": "Red Hat Satellite 6.19",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779706797",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhui:5::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "rhui5/cds-rhel9",
|
||
"product": "Red Hat Update Infrastructure 5",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779798159",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhui:5::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "rhui5/rhua-rhel9",
|
||
"product": "Red Hat Update Infrastructure 5",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1779798222",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhui:5::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "rhui5/cds-kubernetes-tp-rhel9",
|
||
"product": "Red Hat Update Infrastructure 5",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1787241211",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhui:5::el9"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "rhui5/rhua-tp-rhel9",
|
||
"product": "Red Hat Update Infrastructure 5",
|
||
"vendor": "Red Hat",
|
||
"versions": [
|
||
{
|
||
"lessThan": "*",
|
||
"status": "unaffected",
|
||
"version": "1787241260",
|
||
"versionType": "rpm"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:red_hat_3scale_amp:2"
|
||
],
|
||
"defaultStatus": "unaffected",
|
||
"packageName": "3scale-amp2/apicast-gateway-rhel8",
|
||
"product": "Red Hat 3scale API Management Platform 2",
|
||
"vendor": "Red Hat"
|
||
},
|
||
{
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"cpes": [
|
||
"cpe:/a:redhat:insights_proxy:1"
|
||
],
|
||
"defaultStatus": "affected",
|
||
"packageName": "insights-proxy/insights-proxy-container-rhel9",
|
||
"product": "Red Hat Lightspeed proxy 1",
|
||
"vendor": "Red Hat"
|
||
}
|
||
],
|
||
"datePublic": "2026-05-13T14:12:43.971Z",
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "A flaw was found in NGINX, specifically within the ngx_http_rewrite_module. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests under specific rewrite configurations. This can lead to a heap buffer overflow in the NGINX worker process, which may result in arbitrary code execution if Address Space Layout Randomization (ASLR), a security technique to prevent exploitation, is disabled. Otherwise, this flaw causes a denial of service due to a restart of the NGINX worker process."
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"other": {
|
||
"content": {
|
||
"namespace": "https://access.redhat.com/security/updates/classification/",
|
||
"value": "Critical"
|
||
},
|
||
"type": "Red Hat severity rating"
|
||
}
|
||
},
|
||
{
|
||
"cvssV3_1": {
|
||
"attackComplexity": "HIGH",
|
||
"attackVector": "NETWORK",
|
||
"availabilityImpact": "HIGH",
|
||
"baseScore": 8.1,
|
||
"baseSeverity": "HIGH",
|
||
"confidentialityImpact": "HIGH",
|
||
"integrityImpact": "HIGH",
|
||
"privilegesRequired": "NONE",
|
||
"scope": "UNCHANGED",
|
||
"userInteraction": "NONE",
|
||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||
"version": "3.1"
|
||
},
|
||
"format": "CVSS"
|
||
}
|
||
],
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"cweId": "CWE-131",
|
||
"description": "Incorrect Calculation of Buffer Size",
|
||
"lang": "en",
|
||
"type": "CWE"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"tags": [
|
||
"vdb-entry",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/security/cve/CVE-2026-42945"
|
||
},
|
||
{
|
||
"name": "RHBZ#2477116",
|
||
"tags": [
|
||
"issue-tracking",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477116"
|
||
},
|
||
{
|
||
"tags": [
|
||
"x_sadp-csaf-vex"
|
||
],
|
||
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42945.json"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:17790"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:18063"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:19159"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:18041"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:17791"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:17751"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:17792"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:17793"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:17752"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:17794"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:17753"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:18029"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:19371"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:19374"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:19372"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:17417"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:22396"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:22393"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:22394"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:22390"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:22388"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:22389"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:22383"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:22382"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:20442"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:20444"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:58981"
|
||
},
|
||
{
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
],
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:21275"
|
||
}
|
||
],
|
||
"solutions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:17790: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:18063: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:19159: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:18041: Red Hat Enterprise Linux AppStream (v. 8)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:17791: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:17751: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:17792: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:17793: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:17752: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:17794: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:17753: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:18029: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:19371: Red Hat Enterprise Linux AppStream (v. 9)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:19374: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:19372: Red Hat Enterprise Linux AppStream (v. 9)"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:17417: Red Hat Hardened Images"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:22396: Red Hat Openshift Data Foundation 4.14"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:22393: Red Hat Openshift Data Foundation 4.15"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:22394: Red Hat Openshift Data Foundation 4.16"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:22390: Red Hat Openshift Data Foundation 4.17"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:22388: Red Hat Openshift Data Foundation 4.18"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:22389: Red Hat Openshift Data Foundation 4.19"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:22383: Red Hat Openshift Data Foundation 4.20"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:22382: Red Hat Openshift Data Foundation 4.21"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:20442: Red Hat Satellite 6.18"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:20444: Red Hat Satellite 6.19"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:58981: Red Hat Update Infrastructure 5"
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"value": "RHSA-2026:21275: Red Hat Update Infrastructure 5"
|
||
}
|
||
],
|
||
"timeline": [
|
||
{
|
||
"lang": "en",
|
||
"time": "2026-05-13T16:04:29.017Z",
|
||
"value": "Reported to Red Hat."
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"time": "2026-05-13T14:12:43.971Z",
|
||
"value": "Made public."
|
||
}
|
||
],
|
||
"title": "nginx: NGINX: Arbitrary Code Execution Vulnerability",
|
||
"x_adpType": "supplier",
|
||
"x_generator": {
|
||
"engine": "sadp-cli 1.0.0"
|
||
},
|
||
"providerMetadata": {
|
||
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
|
||
"shortName": "redhat-SADP",
|
||
"dateUpdated": "2026-09-10T12:04:53.533Z"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
} |