Skip to content
Fedora 45 nginx Update Addresses Multiple Security Vulnerabilities

Fedora 45 nginx Update Addresses Multiple Security Vulnerabilities

First seen 7 Nov 2026, 03:17 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 7, 2026 at 03:17 UTC
  • •Fedora 45 nginx 1.30.6 fixes five critical vulnerabilities.
  • •Affected CVEs include CVE-2026-93479 and CVE-2026-15176, both rated 8.1.
  • •Users should update their systems immediately to prevent exploitation.

On November 7, 2026, Fedora released updates for nginx 1.30.6, addressing five security vulnerabilities, including CVE-2026-93479, CVE-2026-97205, CVE-2026-15176, CVE-2026-95101, and CVE-2026-97629. These vulnerabilities are classified as high severity, with CVSS scores ranging from 5.3 to 8.1. The updates impact various nginx modules, including mod-security, mod-fancyindex, mod-brotli, mod-js-challenge, and mod-headers-more. The vulnerabilities could allow for unauthorized access or denial of service, potentially affecting a wide range of users relying on nginx for web services. Users are advised to apply the updates promptly to mitigate risks associated with these vulnerabilities. The patches can be installed using the 'dnf' update program.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 12h ago How this analysis works

Timeline

2026-10-14
Multiple CVEs published
Five vulnerabilities in nginx were disclosed, including CVE-2026-93479 and CVE-2026-15176, with CVSS scores of 8.1.
Linuxsecurity
2026-10-14
CVE-2026-95101 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-14
CVE-2026-93479 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-22
First public PoC for CVE-2026-97629
Proof-of-concept code for CVE-2026-97629 was made public, increasing the urgency for updates.
Linuxsecurity
2026-10-27
First public PoC for CVE-2026-97205
Public proof-of-concept for CVE-2026-97205 was released, indicating potential exploitation risks.
Linuxsecurity
2026-10-27
First public PoC for CVE-2026-15176
Public proof-of-concept for CVE-2026-15176 was released, raising concerns about active exploitation.
Linuxsecurity
2026-11-07
Fedora 45 updates released
Fedora released updates for nginx 1.30.6, addressing the previously disclosed vulnerabilities.
Linuxsecurity

More articles in this cluster (8)

Following this threat?

Track Fedora and CVE-2026-15176 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 2

Common questions

Which nginx modules are affected?
The affected modules include mod-security, mod-fancyindex, mod-brotli, mod-js-challenge, and mod-headers-more.
How urgent is it to apply these updates?
It is critical to apply these updates immediately due to the high severity of the vulnerabilities and the availability of public proof-of-concept exploits.
What command should I use to update?
You can use the command 'su -c 'dnf upgrade --advisory FEDORA-2026-7e0167d39a'' to apply the updates.