Critical Data Injection Vulnerabilities in Fedora 42 Nginx Modules

Critical Data Injection Vulnerabilities in Fedora 42 Nginx Modules

First seen 15 Feb 2026, 09:10 UTC Linuxsecurity 79% similarity 33.8

Article Content

Browse articles
ThreatCluster

Multiple Nginx modules in Fedora 42 have been identified with critical data injection vulnerabilities, including nginx-mod-vts, nginx-mod-headers-more, and nginx-mod-brotli. The vulnerabilities were addressed in an update to version 1.28.2, which also involved the removal of a deprecated key and adjustments to the log directory structure.

ThreatCluster AI How this analysis works

Timeline

2026-02-04
CVE-2026-1642 published
2026-02-15
Updates released for affected Nginx modules in Fedora 42

Community

Browse all →

Tracked Entities in This Story