HighFix available

nginx: Multiple Vulnerabilities — GLSA 202608-16

Type: patchSources: Gentoo GLSA

Multiple vulnerabilities in nginx may result in arbitrary code execution. Users should upgrade to the fixed version.

Products: www-servers/nginx
Affected versions: < 1.30.4-r1
Fixed versions: >= 1.30.4-r1
CVEs: CVE-2025-23419, CVE-2025-53859, CVE-2026-1642, CVE-2026-27651, CVE-2026-27654, CVE-2026-27784, CVE-2026-28753, CVE-2026-28755, CVE-2026-32647, CVE-2026-40701, CVE-2026-42055, CVE-2026-42530, CVE-2026-42533, CVE-2026-42934, CVE-2026-42945, CVE-2026-42946, CVE-2026-48142, CVE-2026-56434, CVE-2026-60005, CVE-2026-9256
Confirmed fixed CVEs: Not specified
Updated in this feed: 31 Oct 2026, 22:43 UTC · Revision 1

Source evidence

nginx: Multiple Vulnerabilities — GLSA 202608-16

official-gentoo-glsa · Original source

Published 17 Aug 2026, 00:00 UTC

Multiple vulnerabilities in nginx may result in arbitrary code execution. Users should upgrade to the fixed version.

Multiple vulnerabilities have been found in nginx, the worst of which could result in arbitrary code execution.

www-servers/nginx

Fixed versions: >= 1.30.4-r1

Complete source record

{
  "id": "74f81e97591d1820813004cb0cd4a3e48466a6400e7702e34d71b6b6cc798d59",
  "url": "https://security.gentoo.org/glsa/202608-16",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "nginx: Multiple Vulnerabilities — GLSA 202608-16",
    "summary": "Multiple vulnerabilities in nginx may result in arbitrary code execution. Users should upgrade to the fixed version.",
    "evidence": "Multiple vulnerabilities have been found in nginx, the worst of which could result in arbitrary code execution.",
    "products": [
      {
        "name": {
          "value": "www-servers/nginx",
          "evidence": "Package www-servers/nginx on all architectures"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": ">= 1.30.4-r1",
            "evidence": "Unaffected versions >= 1.30.4-r1"
          }
        ],
        "affected_versions": [
          {
            "value": "< 1.30.4-r1",
            "evidence": "Affected versions < 1.30.4-r1"
          }
        ]
      }
    ],
    "severity": "high",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2025-23419",
        "evidence": "CVE-2025-23419"
      },
      {
        "value": "CVE-2025-53859",
        "evidence": "CVE-2025-53859"
      },
      {
        "value": "CVE-2026-1642",
        "evidence": "CVE-2026-1642"
      },
      {
        "value": "CVE-2026-9256",
        "evidence": "CVE-2026-9256"
      },
      {
        "value": "CVE-2026-27651",
        "evidence": "CVE-2026-27651"
      },
      {
        "value": "CVE-2026-27654",
        "evidence": "CVE-2026-27654"
      },
      {
        "value": "CVE-2026-27784",
        "evidence": "CVE-2026-27784"
      },
      {
        "value": "CVE-2026-28753",
        "evidence": "CVE-2026-28753"
      },
      {
        "value": "CVE-2026-28755",
        "evidence": "CVE-2026-28755"
      },
      {
        "value": "CVE-2026-32647",
        "evidence": "CVE-2026-32647"
      },
      {
        "value": "CVE-2026-40701",
        "evidence": "CVE-2026-40701"
      },
      {
        "value": "CVE-2026-42055",
        "evidence": "CVE-2026-42055"
      },
      {
        "value": "CVE-2026-42530",
        "evidence": "CVE-2026-42530"
      },
      {
        "value": "CVE-2026-42533",
        "evidence": "CVE-2026-42533"
      },
      {
        "value": "CVE-2026-42934",
        "evidence": "CVE-2026-42934"
      },
      {
        "value": "CVE-2026-42945",
        "evidence": "CVE-2026-42945"
      },
      {
        "value": "CVE-2026-42946",
        "evidence": "CVE-2026-42946"
      },
      {
        "value": "CVE-2026-48142",
        "evidence": "CVE-2026-48142"
      },
      {
        "value": "CVE-2026-56434",
        "evidence": "CVE-2026-56434"
      },
      {
        "value": "CVE-2026-60005",
        "evidence": "CVE-2026-60005"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "Severity high"
  },
  "source_id": "official-gentoo-glsa",
  "document_id": 23660,
  "published_at": "2026-08-17T00:00:00+00:00"
}