Several vulnerabilities have been discovered in the NGINX web server. A malicious user could exploit these vulnerabilities (CVE-2026-42055, CVE-2026-42530, CVE-2026-48142) to memory leak, security restriction bypass,  remote code execution and sensitive information disclosure on the targeted system. The Nginx company has released nginx-1.30.3 (Stable) and nginx-1.31.2 (Mainline) versions.

More information on vulnerabilities and updates is available in NGINX security advisory – nginx.org