Question ETA for nginx 1.30.6 (Critical CVE-2026-15176, CVE-2026-93479, CVE-2026-97205)

[DaMa]

Server operating system version

Almalinux

Plesk version and microupdate number

Plesk Obsidian 18.0.81 #4

Hi Plesk-Team,

when can we expect an update addressing the critical Nginx vulnerabilities CVE-2026-15176, CVE-2026-93479, and CVE-2026-97205 (CVSS 9.2)?

Thank you

 

[Sebahat.hadzhi]

Hi, @DaMa . Thank you for your question. Plesk Obsidian 18.0.82 already comes with Nginx 1.30.6, which is patched to the mentioned velnerabilities according to nginx security advisories

Our team is also working on a hotfix for Plesk Obsidian 18.0.81, which is likely going to be released today or on Monday.

 

[DaMa]

Hi, @DaMa . Thank you for your question. Plesk Obsidian 18.0.82 already comes with Nginx 1.30.6, which is patched to the mentioned velnerabilities according to nginx security advisories

Our team is also working on a hotfix for Plesk Obsidian 18.0.81, which is likely going to be released today or on Monday.

Thanks for the information. However, as far as I can see, Plesk Obsidian 18.0.82 has not been released yet.

 

[Sebahat.hadzhi]

Sorry, Plesk Obsidian 18.0.82 will be released on the 27th of October.