Zultys Security Advisory Notice - SAN26-001 Rev 1.0

MX-SE, MX-SE II, MX-E and MX-Virtual systems

None

Not applicable

Not applicable

On May 13, 2026 details of an Encoding Error vulnerability in the NGINX ngx_http_proxy_v2_module was published in the CVE Vulnerability Database under CVE-2026-42926.

The vulnerability may allow an attacker to inject frame headers and payload bytes to an upstream peer.

Zultys have evaluated the reported vulnerability and confirmed that the MX-SE, MX-SE II, MX-E and MX-Virtual products are not impacted.

If additional information is required contact support@zultys.com or your Authorized Zultys Channel Partner.