Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-56434

Fixed in a distro release EPSS <1%CVSS 6.5

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process. Impact: This vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Published 2026-07-15 · CVE record · OSV

Products: F5 NGINX Plus, F5 NGINX Open Source

Distro releases

ReleasePackageFixed in
AlmaLinux 10nginx2:1.26.3-6.el10_2.6
AlmaLinux 10nginx-all-modules2:1.26.3-6.el10_2.6
AlmaLinux 10nginx-core2:1.26.3-6.el10_2.6
AlmaLinux 10nginx-filesystem2:1.26.3-6.el10_2.6
AlmaLinux 10nginx-mod-devel2:1.26.3-6.el10_2.6
AlmaLinux 10nginx-mod-http-image-filter2:1.26.3-6.el10_2.6
AlmaLinux 10nginx-mod-http-perl2:1.26.3-6.el10_2.6
AlmaLinux 10nginx-mod-http-xslt-filter2:1.26.3-6.el10_2.6
AlmaLinux 10nginx-mod-mail2:1.26.3-6.el10_2.6
AlmaLinux 10nginx-mod-stream2:1.26.3-6.el10_2.6
AlmaLinux 8nginx1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
AlmaLinux 8nginx-all-modules1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
AlmaLinux 8nginx-filesystem1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
AlmaLinux 8nginx-mod-devel1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
AlmaLinux 8nginx-mod-http-image-filter1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
AlmaLinux 8nginx-mod-http-perl1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
AlmaLinux 8nginx-mod-http-xslt-filter1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
AlmaLinux 8nginx-mod-mail1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
AlmaLinux 8nginx-mod-stream1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
AlmaLinux 9nginx2:1.26.3-9.module_el9.8.0+300+0781a894.3
AlmaLinux 9nginx2:1.20.1-28.el9_8.5.alma.1
AlmaLinux 9nginx1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1
AlmaLinux 9nginx-all-modules2:1.20.1-28.el9_8.5.alma.1
AlmaLinux 9nginx-all-modules2:1.26.3-9.module_el9.8.0+300+0781a894.3
AlmaLinux 9nginx-all-modules1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1
AlmaLinux 9nginx-core2:1.20.1-28.el9_8.5.alma.1
AlmaLinux 9nginx-core2:1.26.3-9.module_el9.8.0+300+0781a894.3
AlmaLinux 9nginx-core1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1
AlmaLinux 9nginx-filesystem2:1.20.1-28.el9_8.5.alma.1
AlmaLinux 9nginx-filesystem1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1
AlmaLinux 9nginx-filesystem2:1.26.3-9.module_el9.8.0+300+0781a894.3
AlmaLinux 9nginx-mod-devel2:1.20.1-28.el9_8.5.alma.1
AlmaLinux 9nginx-mod-devel1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1
AlmaLinux 9nginx-mod-devel2:1.26.3-9.module_el9.8.0+300+0781a894.3
AlmaLinux 9nginx-mod-http-image-filter1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1
AlmaLinux 9nginx-mod-http-image-filter2:1.26.3-9.module_el9.8.0+300+0781a894.3
AlmaLinux 9nginx-mod-http-image-filter2:1.20.1-28.el9_8.5.alma.1
AlmaLinux 9nginx-mod-http-perl2:1.26.3-9.module_el9.8.0+300+0781a894.3
AlmaLinux 9nginx-mod-http-perl2:1.20.1-28.el9_8.5.alma.1
AlmaLinux 9nginx-mod-http-perl1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1
AlmaLinux 9nginx-mod-http-xslt-filter2:1.26.3-9.module_el9.8.0+300+0781a894.3
AlmaLinux 9nginx-mod-http-xslt-filter1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1
AlmaLinux 9nginx-mod-http-xslt-filter2:1.20.1-28.el9_8.5.alma.1
AlmaLinux 9nginx-mod-mail2:1.20.1-28.el9_8.5.alma.1
AlmaLinux 9nginx-mod-mail2:1.26.3-9.module_el9.8.0+300+0781a894.3
AlmaLinux 9nginx-mod-mail1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1
AlmaLinux 9nginx-mod-stream2:1.26.3-9.module_el9.8.0+300+0781a894.3
AlmaLinux 9nginx-mod-stream1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1
AlmaLinux 9nginx-mod-stream2:1.20.1-28.el9_8.5.alma.1
Alpine 3.21nginx1.26.3-r2
Alpine 3.22nginx1.28.3-r6
Alpine 3.23nginx1.28.3-r6
Alpine 3.24nginx1.30.4-r0
Amazon Linux 2023nginx1:1.30.4-1.amzn2023.0.1
Amazon Linux 2023nginx-all-modules1:1.30.4-1.amzn2023.0.1
Amazon Linux 2023nginx-core1:1.30.4-1.amzn2023.0.1
Amazon Linux 2023nginx-filesystem1:1.30.4-1.amzn2023.0.1
Amazon Linux 2023nginx-mod-devel1:1.30.4-1.amzn2023.0.1
Amazon Linux 2023nginx-mod-http-image-filter1:1.30.4-1.amzn2023.0.1
Amazon Linux 2023nginx-mod-http-perl1:1.30.4-1.amzn2023.0.1
Amazon Linux 2023nginx-mod-http-xslt-filter1:1.30.4-1.amzn2023.0.1
Amazon Linux 2023nginx-mod-mail1:1.30.4-1.amzn2023.0.1
Amazon Linux 2023nginx-mod-stream1:1.30.4-1.amzn2023.0.1
Chainguardcommercial-nginx-plus37.0.3.1-r0
Chainguardnginx-mainline1.31.3-r0
Chainguardnginx-stable1.30.4-r0
Chainguardnginx-stable-package-config1.30.4-r5
Debian 12nginx1.22.1-9+deb12u10
Debian 13nginx1.26.3-3+deb13u8
Debian 14nginx1.30.1-7
Red Hat Enterprise Linux 10.2nginx2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-all-modules2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-core2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-core-debuginfo2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-debuginfo2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-debugsource2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-filesystem2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-mod-devel2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-mod-http-image-filter2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-mod-http-image-filter-debuginfo2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-mod-http-perl2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-mod-http-perl-debuginfo2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-mod-http-xslt-filter2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-mod-http-xslt-filter-debuginfo2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-mod-mail2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-mod-mail-debuginfo2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-mod-stream2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 10.2nginx-mod-stream-debuginfo2:1.26.3-6.el10_2.6
Red Hat Enterprise Linux 8nginx1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-all-modules1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-debuginfo1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-debugsource1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-filesystem1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-mod-devel1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-mod-http-image-filter1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-mod-http-image-filter-debuginfo1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-mod-http-perl1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-mod-http-perl-debuginfo1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-mod-http-xslt-filter1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-mod-http-xslt-filter-debuginfo1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-mod-mail1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-mod-mail-debuginfo1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-mod-stream1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 8nginx-mod-stream-debuginfo1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4
Red Hat Enterprise Linux 9nginx2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-all-modules1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-all-modules2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-all-modules2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-core1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-core2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-core2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-core-debuginfo2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-core-debuginfo2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-core-debuginfo1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-debuginfo1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-debuginfo2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-debuginfo2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-debugsource2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-debugsource2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-debugsource1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-filesystem1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-filesystem2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-filesystem2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-mod-devel1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-mod-devel2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-mod-devel2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-mod-http-image-filter2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-mod-http-image-filter2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-mod-http-image-filter1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-mod-http-image-filter-debuginfo2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-mod-http-image-filter-debuginfo2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-mod-http-image-filter-debuginfo1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-mod-http-perl2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-mod-http-perl1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-mod-http-perl2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-mod-http-perl-debuginfo2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-mod-http-perl-debuginfo1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-mod-http-perl-debuginfo2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-mod-http-xslt-filter1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-mod-http-xslt-filter2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-mod-http-xslt-filter2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-mod-http-xslt-filter-debuginfo1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-mod-http-xslt-filter-debuginfo2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-mod-http-xslt-filter-debuginfo2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-mod-mail2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-mod-mail2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-mod-mail1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-mod-mail-debuginfo2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-mod-mail-debuginfo2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-mod-mail-debuginfo1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-mod-stream2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat Enterprise Linux 9nginx-mod-stream2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-mod-stream1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-mod-stream-debuginfo2:1.20.1-28.el9_8.5
Red Hat Enterprise Linux 9nginx-mod-stream-debuginfo1:1.24.0-7.module+el9.8.0+24626+085354fc.4
Red Hat Enterprise Linux 9nginx-mod-stream-debuginfo2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3
Red Hat hummingbird 1nginx0:1.30.4-2.hum1
Red Hat hummingbird 1nginx-all-modules0:1.30.4-2.hum1
Red Hat hummingbird 1nginx-core0:1.30.4-2.hum1
Red Hat hummingbird 1nginx-filesystem0:1.30.4-2.hum1
Red Hat hummingbird 1nginx-mod-devel0:1.30.4-2.hum1
Red Hat hummingbird 1nginx-mod-http-geoip0:1.30.4-2.hum1
Red Hat hummingbird 1nginx-mod-http-image-filter0:1.30.4-2.hum1
Red Hat hummingbird 1nginx-mod-http-perl0:1.30.4-2.hum1
Red Hat hummingbird 1nginx-mod-http-xslt-filter0:1.30.4-2.hum1
Red Hat hummingbird 1nginx-mod-mail0:1.30.4-2.hum1
Red Hat hummingbird 1nginx-mod-stream0:1.30.4-2.hum1
Red Hat hummingbird 1nginx-mod-stream-geoip0:1.30.4-2.hum1
Rocky Linux 10nginx2:1.26.3-6.el10_2.6
Rocky Linux 8nginx1:1.24.0-3.module+el8.10.0+40249+a5ea815d.3
Rocky Linux 8nginx1:1.24.0-3.module+el8.10.0+40298+8ed65491.4
Rocky Linux 8nginx1:1.24.0-3.module+el8.10.0+40144+38158758
Rocky Linux 8nginx1:1.24.0-3.module+el8.10.0+40220+e6a4bcb0.2
Rocky Linux 8nginx1:1.24.0-3.module+el8.10.0+40187+52bedf24.1
Rocky Linux 9nginx2:1.20.1-28.el9_8.5.rocky.0.1
Rocky Linux 9nginx2:1.26.3-9.module+el9.8.0+40222+e48d13b6.1
Rocky Linux 9nginx2:1.26.3-9.module+el9.8.0+40194+40adfc1b
Rocky Linux 9nginx2:1.26.3-9.module+el9.8.0+40235+8be1317a.2
Rocky Linux 9nginx1:1.24.0-7.module+el9.8.0+40234+d28db9b8.3.rocky.0.1
Rocky Linux 9nginx1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1
Rocky Linux 9nginx1:1.24.0-7.module+el9.8.0+40218+76099d32.2.rocky.0.1
Ubuntu 22.04 LTSnginx1.18.0-6ubuntu14.17
Ubuntu 24.04 LTSnginx1.24.0-2ubuntu7.14
Ubuntu 26.04 LTSnginx1.28.3-2ubuntu1.7
Ubuntu Pro 14.04 LTSnginxno fix
Ubuntu Pro 16.04 LTSnginxno fix
Ubuntu Pro 18.04 LTSnginxno fix
Ubuntu Pro 20.04 LTSnginxno fix
Wolfinginx-mainline1.31.3-r0
Wolfinginx-stable1.30.4-r0
Wolfinginx-stable-package-config1.30.4-r5
openSUSE Tumbleweednginx1.31.3-1.1