Back Linuxsecurity

Fedora 43 nginx 2026

Linuxsecurity •LinuxSecurity Advisories • June 1, 2026

nginx-mod-brotli: Rebuild for 1.30.2 nginx-mod-fancyindex: Rebuild for 1.30.2 nginx-mod-naxsi: Rebuild for 1.30.2 nginx-mod-headers-more: Rebuild for 1.30.2 nginx-mod-vts: Rebuild for 1.30.2 nginx-mod-modsecurity: Rebuild for 1.30.2 nginx: update to 1.30.2 fixes CVE-2026-9256

* Fri May 22 2026 Felix Kaechele - 2:1.30.2-1 - update to 1.30.2 - fixes CVE-2026-9256

[ 1 ] Bug #2481243 - CVE-2026-9256 nginx: code execution and denial of service [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-dd9cd16b18' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in nginx Affects Fedora 43 Users A critical vulnerability, CVE-2026-9256, has been identified in nginx, affecting Fedora 43 users. This vulnerability allows for code execution and denial of service, posing significant risks to systems running nginx version 1.30.2. The issue was published on May 22, 2026, and a proof of concept (PoC) was released shortly after on May 24, 2026. Multiple nginx modules, including nginx-mod-brotli, nginx-mod-fancyindex, nginx-mod-naxsi, nginx-mod-headers-more, nginx-mod-vts, and nginx-mod-modsecurity, require rebuilding to mitigate this vulnerability. Users are advised to upgrade to the patched version using the 'dnf' update program. The updates were made available on May 23, 2026, by Felix Kaechele. This incident highlights the importance of timely updates to prevent exploitation. 9 sources 73

Extracted Entities

CVEs (1)

CVE-2026-9256

Tools (1)

Nginx