Security Advisory: NGINX Vulnerability Update (CVE-2026-42945)

Webscale has become aware of a recently disclosed security vulnerability, CVE-2026-42945, which affects NGINX web servers globally. Transparency and security are our top priorities. We want to keep you informed about this issue and the steps our team has already taken to protect your environment.

Overview of the Vulnerability

CVE-2026-42945 is a high-severity vulnerability involving a specific configuration pattern within the NGINX web server. This issue is not present in default installations; it is only triggered when a specific type of rewrite rule is utilized in the server's routing configuration. If exploited, an attacker could potentially cause the server process to crash, resulting in a temporary service disruption.

Our Current Actions & Timeline

Our security and engineering teams are currently conducting a comprehensive audit of all our application servers.

Specifically, we are reviewing all NGINX configurations across our managed infrastructure to identify any instances of the vulnerable rewrite rules. If we detect this specific configuration pattern on the servers hosting your application, our team will proactively deploy the patches.

We are actively working on this process now and anticipate completing all necessary audits and patching by Wednesday, May 20, 2026.

No Action Required

Because your services are fully managed by us, there is no action required on your part. We are handling the infrastructure auditing and any necessary patching behind the scenes. Our goal is to ensure your services remain secure and highly available.

Further Support

If you have any questions regarding this advisory, our audit process, or our general security practices, please feel free to reach out to our support team at support@webscalenetworks.com or via your customer portal.